Business Planning And Consolidation vulnerabilities

2 known vulnerabilities in Business Planning And Consolidation from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.8 High severity

  SAP BPC MS 10.0: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2023-0016Jan 10, 2023SAP

  SAP BPC MS 10.0 - version 810, allows an unauthorized attacker to execute crafted database queries. The exploitation of this issue could lead to SQL injection vulnerability and could allow an attacker to access, modify, and/or delete data from the backend data

• 7.5 High severity

  Business Planning and Consolidation: Improper Privilege Management

  CVE-2022-41268Dec 13, 2022SAP

  In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200, 300, CPMBPC 810, a transaction code reserved for the customer is used. By implementing such transaction code, a malici