CVE-2022-41260
SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET reque…
Published: 2022-11-08 · CVSS: 6.1 · CVSS 3.1
SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET request. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7