Skip to content
SecondTuesday

Business Planning and Consolidation

1 notes since January 2023.

Priority is derived from CVSS, not SAP’s priority: CVSS 9.0 or higher is Critical, 7.0 or higher High, 4.0 or higher Medium, below 4.0 Low. SAP’s own priority is only on SAP for Me (SAP login required).

Patch DayNoteTitlePriority (derived from CVSS, not SAP’s priority)CVSS
February 20233275841SAP Business Planning and Consolidation - versions 200, 300, allows an attacker with business authorization to upload any files (including web pages) without the proper file format validation. Medium5.4