Business Planning And Consolidation
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:business_planning_and_consolidation:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Business Planning And Consolidation (cc80efc9-91d0-53f4-aee2-a6f0dd4f99ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-23851 |
vulnerable | 2026-06-08 05:56:04.542390 |
Details available
MEDIUM (5.4)
SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file format validation. If other users visit the uploaded malicious web page, the attacker may perform actions on behalf of the users without their consent impacting the confidentiality and integrity of the system.
Published: 2023-02-14T03:11:51.221Z
Updated: 2025-03-21T14:04:17.340Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41268 |
vulnerable | 2026-06-08 05:48:30.107358 |
Details available
HIGH (8.5)
In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By implementing such transaction code, a malicious user may execute unauthorized transaction functionality. Under specific circumstances, a successful attack could enable an adversary to escalate their privileges to be able to read, change or delete system data.
Published: 2022-12-13T02:52:25.032Z
Updated: 2025-04-22T14:20:20.822Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.