Beveiligingsadvies

CVE-2019-0370

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2019-10-08 19:20:08
Laatst bijgewerkt 2024-08-04 17:51:26
Toegewezen door sap
CVSS-score geen score
Status PUBLISHED

Beschrijving

Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.