Business Planning And Consolidation (Sap) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 19 known versions, newest CVE from 2023-05-09. Vendor: Sap.

CVEs of Business Planning And Consolidation

• CVE-2023-31407 - CVSS 5.4 (medium), 2023-05-09: SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting…
• CVE-2023-23851 - CVSS 5.4 (medium), 2023-02-14: SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without…
• CVE-2023-0016 - CVSS 9.9 (critical), 2023-01-10: SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of this issue could lead to SQL injection…
• CVE-2022-41268 - CVSS 8.5 (high), 2022-12-13: In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC…
• CVE-2020-6368 - CVSS 5.4 (medium), 2020-10-15: SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify…
• CVE-2017-16349 - CVSS 8.1 (high), 2018-08-02: An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external…