CVE-2024-37178mediumCWE-79

CVE-2024-37178: medium-severity vulnerability in SAP_SE SAP Financial Consolidation

Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation

Published · Updated

Follow this CVE+ Monitor SAP Financial Consolidation

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 5epss 0.3%
SAP Financial Consolidation does not sufficiently encode user-controlled inputs, resulting in Cross-Site Scripting (XSS) vulnerability. These endpoints are exposed over the network. The vulnerability can exploit resources beyond the vulnerable component. On successful exploitation, an attacker can cause limited impact to confidentiality of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
Affected products
SAP_SE · SAP Financial Consolidation
Related CVEs — SAP_SE SAP Financial Consolidation

In the same product, most dangerous first.

CVE-2025-30016CRITICALAuthentication Bypass Vulnerability in SAP Financial ConsolidationEPSS 0.6%CVE-2024-37177HIGHCross-Site Scripting (XSS) vulnerabilities in SAP Financial ConsolidationEPSS 0.4%CVE-2026-40136MEDIUMDenial of service (DoS) in SAP Financial ConsolidationEPSS 0.3%