← CVE Intelligence

CVE-2024-37177

Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation PUBLISHED

Description (CNA)

SAP Financial Consolidation allows data to enter a Web application through an untrusted source. These endpoints are exposed over the network and it allows the user to modify the content from the web site. On successful exploitation, an attacker can cause significant impact to confidentiality and integrity of the application.

Affected (CNA)

Vendor / productVersions
SAP_SE / SAP Financial Consolidationaffected FINANCE 1010

CWE

CWE-79

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.