PT-2017-13502 · Sap · Sap Businessobjects Financial Consolidation

Publicado 2017-12-03 · Atualizado 2017-12-19 · CVE-2017-14516

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP Business Objects Financial Consolidation versions prior to 2017-06-13

Description A Cross-Site Scripting (XSS) issue exists. This allows for potential malicious script execution.

Recommendations For versions prior to 2017-06-13, update to a version released after 2017-06-13 to resolve the issue.

Correção

XSS

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

CVE-2017-14516

Produtos afetados

Sap Businessobjects Financial Consolidation

Referências · 2

• https://blogs.sap.com/2017/06/13/sap-security-patch-day-june2017 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-14516 · Nota de Segurança