CVE-2024-37177highCWE-79

CVE-2024-37177: high-severity vulnerability in SAP_SE SAP Financial Consolidation

Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation

Published · Updated

Follow this CVE+ Monitor SAP Financial Consolidation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.1epss 0.4%
SAP Financial Consolidation allows data to enter a Web application through an untrusted source. These endpoints are exposed over the network and it allows the user to modify the content from the web site. On successful exploitation, an attacker can cause significant impact to confidentiality and integrity of the application.
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N
Affected products
SAP_SE · SAP Financial Consolidation
Related CVEs — SAP_SE SAP Financial Consolidation

In the same product, most dangerous first.

CVE-2025-30016CRITICALAuthentication Bypass Vulnerability in SAP Financial ConsolidationEPSS 0.6%CVE-2024-37178MEDIUMCross-Site Scripting (XSS) vulnerabilities in SAP Financial ConsolidationEPSS 0.3%CVE-2026-40136MEDIUMDenial of service (DoS) in SAP Financial ConsolidationEPSS 0.3%