Sap Businessobjects Financial Consolidation — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Businessobjects Financial Consolidation, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2017-14516 — CVSS 6.1 (medium): Cross-Site Scripting (XSS) exists in SAP Business Objects Financial Consolidation before 2017-06-13, aka SAP Security Note 2422292.
• CVE-2018-2444 — CVSS 6.1 (medium): SAP BusinessObjects Financial Consolidation, versions 10.0, 10.1, does not sufficiently encode user-controlled inputs, resulting in…
• CVE-2017-6061 — CVSS 4.7 (medium): Cross-site scripting (XSS) vulnerability in the help component of SAP BusinessObjects Financial Consolidation 10.0.0.1933 allows remote…