Description
SAP Financial Consolidation allows data to enter a Web application through an untrusted source. These endpoints are exposed over the network and it allows the user to modify the content from the web site. On successful exploitation, an attacker can cause significant impact to confidentiality and integrity of the application.
References (2)
Core 2
Core References
Vendor Advisory
https://me.sap.com/notes/3457592
Scores
CVSS v3
8.1
EPSS
0.0019
EPSS Percentile
39.8%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-79
Status
published
Products (1)
SAP_SE/SAP Financial Consolidation
FINANCE 1010
Published
Jun 11, 2024
Tracked Since
Feb 18, 2026