GCVE - cpe:2.3:a:sap:financial_consolidation:1010:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:financial_consolidation:1010:*:*:*:*:*:*:*

part: a version: 1010 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Financial Consolidation (`d5caa0e5-e6fd-5bd2-a260-8bbfe643e835`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-37177`	vulnerable	2026-06-08 06:39:46.813651	Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation HIGH (8.1) SAP Financial Consolidation allows data to enter a Web application through an untrusted source. These endpoints are exposed over the network and it allows the user to modify the content from the web site. On successful exploitation, an attacker can cause significant impact to confidentiality and integrity of the application. Published: 2024-06-11T01:58:36.889Z Updated: 2024-08-02T03:50:55.219Z Open on db.gcve.eu Reference links https://me.sap.com/notes/3457592 https://support.sap.com/en/my-support/knowledge-base/security-notes-news.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41260`	vulnerable	2026-06-08 05:48:30.082402	Details available MEDIUM (6.1) SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET request. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application. Published: 2022-11-08T00:00:00.000Z Updated: 2025-04-30T17:57:00.757Z Open on db.gcve.eu Reference links https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html https://launchpad.support.sap.com/#/notes/3260708	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41258`	vulnerable	2026-06-08 05:48:30.079120	Details available MEDIUM (6.5) Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious script when running a common query in the Web Administration Console. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality, integrity and availability of the application. Published: 2022-11-08T00:00:00.000Z Updated: 2025-05-01T13:48:56.355Z Open on db.gcve.eu Reference links https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html https://launchpad.support.sap.com/#/notes/3260708	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41208`	vulnerable	2026-06-08 05:48:29.998609	Details available MEDIUM (5.4) Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to alter current user session. On successful exploitation, the attacker can view or modify information, causing a limited impact on confidentiality and integrity of the application. Published: 2022-11-08T00:00:00.000Z Updated: 2025-05-08T16:02:41.066Z Open on db.gcve.eu Reference links https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html https://launchpad.support.sap.com/#/notes/3260708	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.