BP
Product
Business Planning And Consolidation
6
CVEs
0
On KEV
8.8
Max CVSS
0
New 30D
Severity mix
Critical 0High 3Medium 3Low 0
Watch
Add Business Planning And Consolidation to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-0016 | 8.8 | Jan 10 | SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries Affected: 800; 810 |
| CVE-2017-16349 | 8.1 | Aug 2 | An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC Affected: All versions, or not specified |
| CVE-2022-41268 | 7.5 | Dec 13 | In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code… Affected: 200; 300; 750; 751; 752; 753; +5 more |
| CVE-2023-31407 | 5.4 | May 9 | SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability Affected: 740; 750 |
| CVE-2023-23851 | 5.4 | Feb 14 | SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file… Affected: 200; 300 |
| CVE-2020-6368 | 5.4 | Oct 15 | SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application… Affected: 100; 200; 750; 751; 752; 753; +3 more |
Showing 6