Business Planning and Consolidation vulnerabilities

Product

Business Planning and Consolidation

by SAP · last CVE May 9, 2023

CVEs

On KEV

8.8

Max CVSS

New 30D

Severity mix

Critical 0High 3Medium 3Low 0

Severity

Exploitation

Watch

Add Business Planning and Consolidation to your stack to get only the CVEs that touch what you run.

CVE	CVSS	EPSS	Published	Summary · affected versions
CVE-2023-31407	5.4	0%	May 9	Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation Affected: 740; 750
CVE-2023-23851	5.4	0%	Feb 14	SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file… Affected: 200; 300
CVE-2020-6368	5.4	1%	Oct 15	SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application… Affected: 100; 200; 750; 751; 752; 753; +3 more