CVE-2024-37177
Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation
- State
- Published
- Severity
- 8.1 High
- Published
- Jun 11, 2024
- Updated
- Aug 2, 2024
- Reserved
- Jun 4, 2024
Description
SAP Financial Consolidation allows data to enter a Web application through an untrusted source. These endpoints are exposed over the network and it allows the user to modify the content from the web site. On successful exploitation, an attacker can cause significant impact to confidentiality and integrity of the application.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.1 High | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N | sap |
Weaknesses
- CWE-79 Improper Neutralization of Input During Web Page Generation
Affected Products
| Product | Versions |
|---|---|
SAP Financial ConsolidationSAP_SE |
|
References
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.