5.4
CVSSv3

CVE-2023-23851

Published: 14/02/2023 Updated: 11/04/2023
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file format validation. If other users visit the uploaded malicious web page, the attacker may perform actions on behalf of the users without their consent impacting the confidentiality and integrity of the system.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

sap business planning and consolidation 200

sap business planning and consolidation 300