Unscored CVE-2018-2444 EUVD-2018-14299GHSA-5884-8f6m-9wpp

SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-S…

Published Aug 14, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP BusinessObjects Financial Consolidation

Description

SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

Affected products

Vendor	Product	Affected	Fixed
SAP	SAP BusinessObjects Financial Consolidation	10.0, 10.1	—

References

105087 vdb-entry
https://launchpad.support.sap.com/#/notes/2621395
https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742