Web Script Injection Vulnerability in SAP Financial Consolidation by SAP

CVE-2022-41260

What is CVE-2022-41260?

The vulnerability in SAP Financial Consolidation version 1010 allows for insufficient encoding of user-controlled input, which may enable unauthenticated attackers to inject web scripts via a GET request. If exploited, this could lead to unauthorized access to modify or view information, thereby impacting the confidentiality and integrity of the application. It's essential for users of this software to remain vigilant and apply the necessary updates or mitigations to safeguard their systems.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References