SAP Business Planning and Consolidation 200
Approved changes feed: RSS · Atom
cpe:2.3:a:sap:business_planning_and_consolidation:200:*:*:*:*:*:*:*
part: a version: 200 update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Business Planning And Consolidation (cc80efc9-91d0-53f4-aee2-a6f0dd4f99ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-23851 |
vulnerable | 2026-06-08 05:56:04.543170 |
Details available
MEDIUM (5.4)
SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file format validation. If other users visit the uploaded malicious web page, the attacker may perform actions on behalf of the users without their consent impacting the confidentiality and integrity of the system.
Published: 2023-02-14T03:11:51.221Z
Updated: 2025-03-21T14:04:17.340Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-41268 |
vulnerable | 2026-06-08 05:48:30.108473 |
Details available
HIGH (8.5)
In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By implementing such transaction code, a malicious user may execute unauthorized transaction functionality. Under specific circumstances, a successful attack could enable an adversary to escalate their privileges to be able to read, change or delete system data.
Published: 2022-12-13T02:52:25.032Z
Updated: 2025-04-22T14:20:20.822Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-6368 |
vulnerable | 2026-06-08 05:26:45.186324 |
Details available
MEDIUM (5.4)
SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authorization, and to potentially obtain authentication information from other legitimate users, leading to Cross Site Scripting.
Published: 2020-10-15T01:54:18.000Z
Updated: 2024-08-04T09:02:40.215Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.