Web Script Injection Vulnerability in SAP Financial Consolidation by SAP

CVE-2022-41260

Summary

The vulnerability in SAP Financial Consolidation version 1010 allows for insufficient encoding of user-controlled input, which may enable unauthenticated attackers to inject web scripts via a GET request. If exploited, this could lead to unauthorized access to modify or view information, thereby impacting the confidentiality and integrity of the application. It's essential for users of this software to remain vigilant and apply the necessary updates or mitigations to safeguard their systems.

References