Sap Business_planning_and_consolidation
6 CVEs affecting Sap Business_planning_and_consolidation. Latest disclosed: 2023-05-09. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-0016 | Critical | 9.9 | 2023-01-10 | SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of this issue could lead to SQL injection… |
CVE-2022-41268 | High | 8.5 | 2022-12-13 | In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, … |
CVE-2017-16349 | High | 8.1 | 2018-08-02 | An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external en… |
CVE-2023-31407 | Medium | 5.4 | 2023-05-09 | SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulner… |
CVE-2023-23851 | Medium | 5.4 | 2023-02-14 | SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without t… |
CVE-2020-6368 | Medium | 5.4 | 2020-10-15 | SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displaye… |