Vulnerability Details CVE-2023-31407
SAP Business Planning and Consolidation - versions 740, 750, allows an authorized attacker to upload a malicious file, resulting in Cross-Site Scripting vulnerability. After successful exploitation, an attacker can cause limited impact on confidentiality and integrity of the application.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 53.2%
CVSS Severity
CVSS v3 Score 5.4
References
Products affected by CVE-2023-31407
-
cpe:2.3:a:sap:business_planning_and_consolidation:740
-
cpe:2.3:a:sap:business_planning_and_consolidation:750