Unrated severityNVD Advisory· Published Oct 8, 2019· Updated Aug 4, 2024
CVE-2019-0370
CVE-2019-0370
Description
Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.
Affected products
2- Range: before 10.0 and 10.1
- SAP SE/SAP Financial Consolidationv5Range: < 10.0
Patches
Vulnerability mechanics
References
2- launchpad.support.sap.commitrex_refsource_MISC
- wiki.scn.sap.com/wiki/pages/viewpage.actionmitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.