CVE-2017-14516

6.1MEDIUM

Key Information:

Vendor
SAP
Status
Businessobjects Financial Consolidation
Vendor
CVE Published:
3 December 2017

Summary

Cross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292.

References

https://blogs.sap.com/2017/06/13/sap-security-patch-day-j...
x_refsource_CONFIRM

CVSS V3.1

Score:
6.1
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.