Business planning and consolidation

This hub aggregates every CVE we track for Business planning and consolidation, a product in the enterprise software space. Use it to gauge the current risk picture and drill into individual advisories.

Severity distribution

Monthly trend

The 6 most recently published vulnerabilities affecting Business planning and consolidation.

• CVE-2023-31407Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation5.4May 9, 2023
• CVE-2023-23851SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file format validation. If o...5.4Feb 14, 2023
• CVE-2023-0016SQL Injection vulnerability in SAP Business Planning and Consolidation MS9.9Jan 10, 2023
• CVE-2022-41268In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the c...8.5Dec 13, 2022
• CVE-2020-6368SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authoriz...5.4Oct 15, 2020
• CVE-2017-16349An exploitable XML external entity vulnerability exists in the reporting functionality of SAP BPC. A specially crafted XML request can cause an XML external entity to be referenced, resulting in in...8.1Aug 2, 2018