CVE:CVE-2019-0276
CNNVD:CNNVD-201903-364
SAP 9.0(FSAPPL版本5)和SAP S/4HANA Financial Products Subledger (S4FPSL版本1)中的银行服务组件存在跨站脚本漏洞，该漏洞源于程序没有对已认证用户进行正确的授权检查。远程攻击者利用该漏洞提升权限。
solution:Upgrade sap banking_services_from_sap to a higher version than 9.0,and avoid the version 9.0; Upgrade sap s/4hana_financial_products_subledger to a higher version than 1.0,and avoid the version 1.0