Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

  1. Reconshell
  2. Vulnerabilities (CVE)
Filtered by vendor Sap Subscribe
Filtered by product Businessobjects Financial Consolidation
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-2444 1 Sap 1 Businessobjects Financial Consolidation 2018-10-12 4.3 MEDIUM 6.1 MEDIUM
SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.
CVE-2017-14516 1 Sap 1 Businessobjects Financial Consolidation 2017-12-19 4.3 MEDIUM 6.1 MEDIUM
Cross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292.
CVE-2017-6061 1 Sap 1 Businessobjects Financial Consolidation 2017-03-16 4.3 MEDIUM 4.7 MEDIUM
Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Security Note 2368106.