CVE-2019-0370

Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the…

published October 8, 2019

CVSS
—
EPSS
1%
Percentile
53.4
In the wild
Unconfirmed
What it is

Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00721 · 53.4th percentile
Published
2019-10-08T19:20Z
EPSS history
Timeline
  • 08 OCT 19:20Z
    Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the…
    cvelistv5