PT-2017-13502 · Sap · Sap Businessobjects Financial Consolidation

Published 2017-12-03 · Updated 2017-12-19 · CVE-2017-14516

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SAP Business Objects Financial Consolidation versions prior to 2017-06-13

Description A Cross-Site Scripting (XSS) issue exists. This allows for potential malicious script execution.

Recommendations For versions prior to 2017-06-13, update to a version released after 2017-06-13 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2017-14516

Affected Products

Sap Businessobjects Financial Consolidation

References · 2

• https://blogs.sap.com/2017/06/13/sap-security-patch-day-june2017 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-14516 · Security Note