SAP SE SAP Financial Consolidation
7 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2022-41260 | = 1010 | SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker t | MEDIUM 6.1 | 0.5 % | ||
| CVE-2022-41258 | = 1010 | Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious scrip | MEDIUM 6.5 | 0.4 % | ||
| CVE-2022-41208 | = 1010 | Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to a | MEDIUM 5.4 | 0.5 % | ||
| CVE-2022-31595 | 1010 | SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, resulting in escalati | HIGH 8.8 | 0.8 % | ||
| CVE-2022-26104 | < 10.1 | SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an | MEDIUM 5.3 | 0.7 % | ||
| CVE-2019-0370 | < 10.0 ; < 10.1 | Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to int | MEDIUM 6.5 | 0.7 % | ||
| CVE-2019-0369 | < 10.0 ; < 10.1 | SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to | MEDIUM 5.4 | 0.5 % |