PT-2023-23301 · Sap · Sap Business Planning/Consolidation

Name of the Vulnerable Software and Affected Versions: SAP Business Planning and Consolidation versions 740, 750 Description: The issue allows an authorized attacker to upload a malicious file, resulting in a Cross-Site Scripting issue. After successful exploitation, an attacker can cause limited...

SAP Business Planning and Consolidation XML External Entity Injection Vulnerability

SAP Business Planning and Consolidation is a comprehensive budget management solution from SAP. An XML external entity injection vulnerability exists in SAP Business Planning and Consolidation. An attacker could obtain sensitive information and cause a denial of service...