CVE-2019-0370

概要

参考情報

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

financial consolidation のその他の脆弱性

• CVE-2022-41260中 6.1SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker t…
• CVE-2022-41258中 6.5Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious scrip…
• CVE-2022-41208中 5.4Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to a…
• CVE-2022-26104中 5.3SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an…
• CVE-2019-0369中 5.4SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to…