CVE-2018-2444

CVE-2018-2444 affects SAP BusinessObjects Financial Consolidation, versions 10.0 and 10.1. The vulnerability is a Cross-Site Scripting (XSS) flaw caused by insufficient encoding of user-controlled inputs. The CNVD/NVD entries describe a remote-exploitation scenario where an attacker could inject ...