SAP Business Planning and Consolidation

2 published vulnerabilities name this product.

As the CNAs write it in their CVE records (vendor and product); the versions are theirs.

CVEVulnerable versionsTitleSeverityPublishedEPSSExploitation
CVE-2023-23851200 ; 300SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including wMEDIUM 5.40.3 %
CVE-2022-41268SAP_BW 750 – SAP_BW 757 ; DWCORE 200 – DWCORE 300 ; CPMBPC 810In some SAP standard roles in SAP Business Planning and Consolidation - versions - SAP_BW 750, 751, 752, 753, 754, 755, 756, 757, DWCORE 200HIGH 8.50.6 %