Lucene search
K

7 matches found

ATTACKERKB
ATTACKERKB
added 2026/04/14 12:8 a.m.1 views

CVE-2026-27681

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of th...

9.9CVSS5.9AI score0.00061EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2026/04/14 12:8 a.m.1 views

CVE-2026-27681 SQL Injection vulnerability in SAP Business Planning and Consolidation and SAP Business Warehouse

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of th...

9.9CVSS5.9AI score0.00061EPSS
Exploits0References2
EUVD
EUVD
added 2026/04/14 12:8 a.m.0 views

EUVD-2026-22154

Due to insufficient authorization checks in SAP Business Planning and Consolidation and SAP Business Warehouse, an authenticated user can execute crafted SQL statements to read, modify, and delete database data. This leads to a high impact on the confidentiality, integrity, and availability of th...

9.9CVSS5.9AI score0.00061EPSS
Exploits0References2
CNNVD
CNNVD
added 2026/04/14 12:0 a.m.3 views

SAP Business Planning and Consolidation和SAP Business Warehouse SQL注入漏洞

SAP Business Planning and Consolidation, as well as SAP Business Warehouse, are products of the German company SAP. SAP Business Planning and Consolidation is a business planning and integration software. This software provides features for budget preparation, forecasting, and financial...

9.9CVSS6.2AI score0.00061EPSS
Exploits0References2
RedhatCVE
RedhatCVE
added 2025/05/23 2:37 a.m.1 views

CVE-2023-23851

SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files including web pages without the proper file format validation. If other users visit the uploaded malicious web page, the attacker may perform actions on behalf of the...

5.4CVSS7AI score0.0022EPSS
Exploits0References1
OSV
OSV
added 2023/05/09 2:15 a.m.3 views

CVE-2023-31407

SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application...

5.4CVSS6.1AI score
Exploits0References2
CNVD
CNVD
added 2020/10/21 12:0 a.m.2 views

SAP Business Planning and Consolidation Cross-Site Scripting Vulnerability

SAP Business Planning and Consolidation is a business planning and consolidation software from SAP, Germany. The software provides budgeting, forecasting and financial consolidation functions. A cross-site scripting vulnerability exists in SAP Business Planning and Consolidation versions 750, 751...

5.4CVSS6.1AI score0.00384EPSS
Exploits0References1
Rows per page
Query Builder