CVE-2023-31407

CWE-79 — Cross-site Scripting (XSS)3 documents3 sources
Severity
5.4MEDIUM
EPSS
0.4%
top 40.27%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
SAP SE SAP Business Planning AND ConsolidationSAP Business Planning AND Consolidation
Timeline
PublishedMay 9

Description

SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NExploitability: 2.3 | Impact: 2.7

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-98f5-ffr3-4fm6: SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripti↗2023-05-09
▶
CVEList
Cross-Site Scripting (XSS) vulnerability in SAP Business Planning and Consolidation↗2023-05-09
▶
CVE-2023-31407 (MEDIUM CVSS 5.4) | SAP Business Planning and Consolida | cvebase.io