Cross site scripting

2018-08-1416:29:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

45.1%

JSON

SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability.

CPENameOperatorVersion
businessobjects_financial_consolidationeq10.1
businessobjects_financial_consolidationeq10.0

CPE	Name	Operator	Version
	businessobjects_financial_consolidation	eq	10.1
	businessobjects_financial_consolidation	eq	10.0

References

www.securityfocus.com/bid/105087

launchpad.support.sap.com/

wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499352742

0.001 Low

EPSS

Percentile

45.1%

JSON

Related for PRION:CVE-2018-2444