CVE-2019-0369

SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by…

published October 8, 2019

CVSS
—
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00526 · 43.7th percentile
Published
2019-10-08T19:19Z
EPSS history
Timeline
  • 08 OCT 19:19Z
    SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by…
    cvelistv5