CoreCVE
Back

MEDIUM

Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious script when running a common query in the Web Administration Console

Published Nov 8, 2022

Description

Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious script when running a common query in the Web Administration Console. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality, integrity and availability of the application.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

References (3)

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED
Assigner sap
Published Nov 8, 2022
Updated May 1, 2025
Reserved Sep 21, 2022
Link CVE-2022-41258

CISA Vulnrichment

Updated May 1, 2025

NVD

Status Modified
Modified Jun 17, 2026
Link CVE-2022-41258

Red Hat

No data

ENISA EUVD

Assigner sap
Published Nov 8, 2022
Updated May 1, 2025
Link EUVD-2022-44467

GitHub

No data