SAP Financial Consolidation 10.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:financial_consolidation:10.1:*:*:*:*:*:*:*

part: a version: 10.1 update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductFinancial Consolidation (d5caa0e5-e6fd-5bd2-a260-8bbfe643e835)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-26104 vulnerable 2026-06-08 05:41:50.538306 Details available
SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.
Published: 2022-03-08T13:36:29.000Z
Updated: 2024-08-03T04:56:37.495Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0370 vulnerable 2026-06-08 05:12:19.795974 Details available
Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leading to XPath Injection.
Published: 2019-10-08T19:20:08.000Z
Updated: 2024-08-04T17:51:26.086Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-0369 vulnerable 2026-06-08 05:12:19.795523 Details available
SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious scripts, leading to reflected cross site scripting vulnerability.
Published: 2019-10-08T19:19:11.000Z
Updated: 2024-08-04T17:51:26.111Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.