CVE-2017-6061: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Securit...

PT-2017-16871

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Financial Consolidation version 10.0.0.1933 Description A cross-site scripting XSS issue exists in the help component, allowing remote attackers to inject arbitrary web script or HTML via a GET request to the...