Security Advisory

CVE-2019-0369

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-10-08 19:19:11
Last updated 2024-08-04 17:51:26
Assigner sap
State PUBLISHED

Description

SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.