CVE-2022-41258: XSS
Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious script when running a common query in the Web Administration Console. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality, integrity and availability of the application.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-41258?
CVE-2022-41258 has a moderate severity rating due to its potential for unauthorized information access and modification.
How do I fix CVE-2022-41258?
To fix CVE-2022-41258, ensure that you apply the latest security patches provided by SAP for Financial Consolidation version 1010.
What systems are affected by CVE-2022-41258?
CVE-2022-41258 specifically affects SAP Financial Consolidation version 1010.
Who can exploit CVE-2022-41258?
CVE-2022-41258 can be exploited by authenticated attackers with access to the Web Administration Console.
What type of vulnerability is CVE-2022-41258?
CVE-2022-41258 is classified as an input validation vulnerability, allowing script injection.