SAP SE SAP Business Planning And Consolidation vulnerabilities
3 vulnerabilities
Known vulnerabilities in SAP SE SAP Business Planning And Consolidation, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.
CVE-2025-42930sap_sesap business planning and consolidation
EPSS score0.34%
SAP Business Planning and Consolidation allows an authenticated standard user to call a function module by crafting specific parameters that causes a loop, consuming excessive resources and resulting in system unavailability. This leads to high impact on the availability of the application, there is no impact on confidentiality or integrity.CVE-2020-6368sap_sesap business planning and consolidation+1EPSS score0.61%
SAP Business Planning and Consolidation, versions - 750, 751, 752, 753, 754, 755, 810, 100, 200, can be abused by an attacker, allowing them to modify displayed application content without authorization, and to potentially obtain authentication information from other legitimate users, leading to Cross Site Scripting.CVE-2023-31407sap_sesap business planning and consolidation+1EPSS score0.34%
SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.