Financial Consolidation (Sap) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2024-06-11. Vendor: Sap.

CVEs of Financial Consolidation

• CVE-2024-37177 - CVSS 8.1 (high), 2024-06-11: SAP Financial Consolidation allows data to enter a Web application through an untrusted source. These endpoints are exposed over the network and it allows the…
• CVE-2022-41260 - CVSS 6.1 (medium), 2022-11-08: SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web…
• CVE-2022-41258 - CVSS 6.5 (medium), 2022-11-08: Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious script when running a…
• CVE-2022-41208 - CVSS 5.4 (medium), 2022-11-08: Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to alter current user…
• CVE-2022-26104 - CVSS 5.3 (medium), 2022-03-10: SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user…
• CVE-2019-0370 - CVSS 6.5 (medium), 2019-10-08: Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the…
• CVE-2019-0369 - CVSS 5.4 (medium), 2019-10-08: SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts…