Skip to content
OpenAdvisories
High · 8.1 CVE-2024-37177 EUVD-2024-36483GHSA-mx49-v6wc-9vxf

Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation

Published Jun 11, 2024 · Updated Aug 2, 2024 · Assigned by sap

Description

SAP Financial Consolidation allows data to enter
a Web application through an untrusted source. These endpoints are exposed over
the network and it allows the user to modify the content from the web site. On
successful exploitation, an attacker can cause significant impact to
confidentiality and integrity of the application.

Affected products

VendorProductAffectedFixed
SAP_SE SAP Financial Consolidation FINANCE 1010 —

Advisories 2

References