Lucene search
SapCVELIST:CVE-2019-0370HistoryOct 08, 2019 - 7:20 p.m.
CVE-2019-0370
2019-10-0819:20:08
sap
www.cve.org
0.001 Low
EPSS
Percentile
34.3%
Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.
CNA Affected
[
{
"product": "SAP Financial Consolidation",
"vendor": "SAP SE",
"versions": [
{
"status": "affected",
"version": "< 10.0"
},
{
"status": "affected",
"version": "< 10.1"
}
]
}
]Related
prion
prion
Input validation
2019-10-08 20:15:00
cve
cve
CVE-2019-0370
2019-10-08 20:15:11
nvd
nvd
CVE-2019-0370
2019-10-08 20:15:11