CVE-2023-0016

SAP BPC MS 10.0 version 810 contains a SQL injection vulnerability. The issue arises from lack of validation of externally entered SQL statements, enabling an unauthenticated attacker to craft queries that could be executed against the backend database. Reported impacts include unauthorized acces...

SAP Business Planning and Consolidation Cross-Site Scripting Vulnerability

SAP Business Planning and Consolidation is a business planning and consolidation software from SAP, Germany. The software provides budgeting, forecasting and financial consolidation functions. A cross-site scripting vulnerability exists in SAP Business Planning and Consolidation versions 750, 751...