CVE-2017-6061

Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject…

published March 16, 2017

CVSS
—
EPSS
2%
Percentile
75.6
In the wild
Unconfirmed
What it is

Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Security Note 2368106.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01600 · 75.6th percentile
Published
2017-03-16T03:49Z
EPSS history
Timeline
  • 16 MAR 03:49Z
    Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject…
    cvelistv5