CVE-2026-40136Medium 4.3Denial of service (DoS) in SAP Financial Consolidation0.3%
CVE-2025-30016Critical 9.8Authentication Bypass Vulnerability in SAP Financial Consolidation0.6%
CVE-2024-37178Medium 5.0Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation0.3%
CVE-2024-37177High 8.1Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation0.4%
CVE-2022-41260Medium 6.1SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET request. On successful explo0.6%
CVE-2022-41208Medium 5.4Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to alter current user session. On successful exploitation, the a0.5%
CVE-2022-41258Medium 6.5Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious script when running a common query in the Web Administration Cons0.5%
CVE-2022-31595UnratedSAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.0.8%
CVE-2022-26104UnratedSAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.0.7%