Vulnerabilities > CVE-2023-31407 - Unspecified vulnerability in SAP Business Planning and Consolidation 740/750
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
LOW Integrity impact
LOW Availability impact
NONE Summary
SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 2 |