Cross site scripting

Cross-site scripting XSS vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote attackers to inject arbitrary web script or HTML via a GET request. /finance/help/en/frameset.htm is the URI for this component. The vendor response is SAP Securit...

CVE-2017-6061

The CVE covers a Cross-Site Scripting (XSS) vulnerability in the SAP BusinessObjects Financial Consolidation 10.0.0.1933 product, exposed through the help component. Specifically, an attacker can trigger XSS by crafting a GET request to the help UI, notably /finance/help/en/frameset.htm, potentia...