Sap Business Planning And Consolidation
Approved changes feed: RSS · Atom
cpe:2.3:a:sap_se:sap_business_planning_and_consolidation:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap Se (f8f3f5db-c060-5230-a8bd-f91674203607) |
|---|---|
| Product | Sap Business Planning And Consolidation (ab4507e0-1ae2-5e96-a4d5-24a1338d173e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-42930 |
vulnerable | 2026-06-08 07:25:08.432877 |
Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation
MEDIUM (6.5)
SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting specific parameters that causes a loop, consuming excessive resources and resulting in system unavailability. This leads to high impact on the availability of the application, there is no impact on confidentiality or integrity.
Published: 2025-09-09T02:11:18.387Z
Updated: 2025-09-09T13:32:49.181Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31407 |
vulnerable | 2026-06-08 06:04:43.044954 |
Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation
MEDIUM (5.4)
SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.
Published: 2023-05-09T01:37:53.404Z
Updated: 2025-01-28T19:06:57.065Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6368 |
vulnerable | 2026-06-08 05:26:45.184988 |
Details available
MEDIUM (5.4)
SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authorization, and to potentially obtain authentication information from other legitimate users, leading to Cross Site Scripting.
Published: 2020-10-15T01:54:18.000Z
Updated: 2024-08-04T09:02:40.215Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.