3.5
CVSSv2

CVE-2019-0369

Published: 08/10/2019 Updated: 10/10/2019
CVSS v2 Base Score: 3.5 | Impact Score: 2.9 | Exploitability Score: 6.8
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 312
Vector: AV:N/AC:M/Au:S/C:N/I:P/A:N

Vulnerability Summary

SAP Financial Consolidation, prior to 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an malicious user to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap financial consolidation 10.0

sap financial consolidation 10.1