Sap financial consolidation

This hub aggregates every CVE we track for Sap financial consolidation, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 11 most recently published vulnerabilities affecting Sap financial consolidation.

• CVE-2026-40136Denial of service (DoS) in SAP Financial Consolidation4.3May 12, 2026
• CVE-2025-30016Authentication Bypass Vulnerability in SAP Financial Consolidation9.8Apr 8, 2025
• CVE-2024-37178Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation5.0Jun 11, 2024
• CVE-2024-37177Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation8.1Jun 11, 2024
• CVE-2022-41258Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker to inject malicious script when running a common query in the Web Administration C...6.5Nov 8, 2022
• CVE-2022-41208Due to insufficient input validation, SAP Financial Consolidation - version 1010, allows an authenticated attacker with user privileges to alter current user session. On successful exploitation, th...5.4Nov 8, 2022
• CVE-2022-41260SAP Financial Consolidation - version 1010, does not sufficiently encode user-controlled input which may allow an unauthenticated attacker to inject a web script via a GET request. On successful ex...6.1Nov 8, 2022
• CVE-2022-31595SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticated user, resulting in escalation of privileges.8.8Jun 14, 2022
• CVE-2022-26104SAP Financial Consolidation - version 10.1, does not perform necessary authorization checks for updating homepage messages, resulting for an unauthorized user to alter the maintenance system message.5.3Mar 8, 2022
• CVE-2019-0370Due to missing input validation, SAP Financial Consolidation, before versions 10.0 and 10.1, enables an attacker to use crafted input to interfere with the structure of the surrounding query leadin...6.5Oct 8, 2019
• CVE-2019-0369SAP Financial Consolidation, before versions 10.0 and 10.1, does not sufficiently encode user-controlled inputs, which allows an attacker to execute scripts by uploading files containing malicious ...5.4Oct 8, 2019