CVE-2019-0369: XSS
SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-0369?
CVE-2019-0369 has been classified with a high severity level due to the potential for reflected cross site scripting attacks.
How do I fix CVE-2019-0369?
To fix CVE-2019-0369, upgrade to SAP Financial Consolidation version 10.2 or later, which addresses the vulnerability.
What are the impacts of CVE-2019-0369?
The impacts of CVE-2019-0369 include the possibility of attackers executing malicious scripts through uploaded files.
Which versions of SAP Financial Consolidation are affected by CVE-2019-0369?
CVE-2019-0369 affects SAP Financial Consolidation versions 10.0 and 10.1.
Can CVE-2019-0369 be exploited remotely?
Yes, CVE-2019-0369 can be exploited remotely if an attacker is able to upload a malicious file.