<?xml version="1.0" encoding="utf-8"?>
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p2-CVSS 8.4] 0003411869 BC-SRV-AIF - [CVE-2024-21737] Code Injection vulnerability in SAP Application Interface Frame
[p3-CVSS 4.1] 0003387737 BC-SRV-COM - [CVE-2024-21738] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP
[p4-CVSS 3.7] 0003190894 CEC-MKT-DM-CON - [CVE-2024-21734] URL Redirection vulnerability in SAP Marketing (Contacts App)
[p3-CVSS 6.4] 0003260667 FIN-FSCM-PF-IHB - [CVE-2024-21736] Missing Authorization check in SAP S/4HANA Finance (Advanced Pa
		Only install this note if you are using the product S/4HANA Finance for advanced payment management 
		as well as its component In-house banking for S/4HANA Finance for advanced payment management.
                Not checked: Manual activity for Release 107  w/o Support Packages 

[p2-CVSS 7.5]  0003389917 BC-CST-IC - [CVE-2023-44487] Denial of service (DOS) in SAP Web Dispatcher, SAP NetWeaver Ap
              this policy checks only the version of ABAP kernel greater than 7.45: According note
              "ICM is NOT affected, if a (patched) SAP Web Dispatcher is installed in front of the system 
		and all traffic passes though this SAP Web Dispatcher.
              ICM <= 7.54 is additionally only affected, if parameter icm/HTTP/support_http2 is explicitly set to TRUE
		in the instance or DEFAULT profile.
              ICM <= 7.45 is NOT affected because it does not support HTTP/2.
              ICM is NOT affected, if parameter icm/HTTP/support_http2 is explicitly set to FALSE."
[p3-CVSS 4.1]  0003392626 BC-CST-IC - [CVE-2024-22124] Information Disclosure vulnerability in SAP NetWeaver Internet
              kernel



The policy does not check the following Security Notes:

[p1-CVSS 9.1] 0003411067 BC-CP-CF-SEC-LIB - [Multiple CVEs] Escalation of Privileges in SAP Business Technology Platform
[p1-CVSS 9.1] 0003413475 BC-CP-IS-EDG-DPL - [Multiple CVEs]  Escalation of Privileges in SAP Edge Integration Cell
[p1-CVSS 9.1] 0003412456 CA-BAS-S8D - [CVE-2023-49583] Escalation of Privileges in applications developed through SAP
[p2-CVSS 7.3] 0003407617 CA-LT-SLT - [CVE-2024-21735] Improper Authorization check in SAP LT Replication Server
[p2-CVSS 7.4] 0003386378 BC-FES-CTL - [CVE-2024-22125] Information Disclosure vulnerability in Microsoft Edge browser
[p3-CVSS 5.3] 0003324732 BC-JAS-SEC - [CVE-2023-31405] Log Injection vulnerability in SAP NetWeaver AS for Java (Log V


SAP Security: PatchDay_2024-01
Version: 001
Date:    11.01.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 4.7] 0003396109 BC-FES-BUS - [CVE-2024-22128] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Busin
[p2-CVSS 7.3] 0003385711 BC-FES-WGU - [CVE-2023-49580] Information disclosure vulnerability in SAP NetWeaver Applicati
[p3-CVSS 4.3] 0002897391 CA-MDG-APP-MM - [CVE-2024-24741] Missing Authorization check in SAP Master Data Governance Mater
[p4-CVSS 3.5] 0003363690 CA-MDG-ML - [CVE-2023-49058] Directory Traversal vulnerability in SAP Master Data Governance
			plus manual activity
[p1-CVSS 9.1] 0003420923 CA-SUR - [CVE-2024-22131] Code Injection vulnerability in SAP ABA (Application Basis)
[p2-CVSS 7.6] 0003410875 CA-WUI-UI - [CVE-2024-22130] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient
[p3-CVSS 4.1] 0003158455 CA-WUI-WKB - [CVE-2024-24742] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient
[p3-CVSS 6.3] 0002637727 FIN-FSCM-CLM - [CVE-2024-24739] Missing authorization check in SAP Bank Account Management
[p3-CVSS 4.3] 0003237638 PA-FIO-OVT - [CVE-2024-25643] Missing authorization check in SAP Fiori app ("My Overtime Requ
[p3-CVSS 5.3]  0003360827 BC-FES-ITS - [CVE-2024-24740] Information Disclosure vulnerability in SAP NetWeaver Applicati
				Kernel

The policy does not check the following Security Notes:

[p1-CVSS 10.0]  0002622660 BC-FES-BUS-DSK - Security updates for the browser control Google Chromium delivered with SAP Busi
[p2-CVSS 8.6]  0003426111 BC-GP - [CVE-2024-24743] XXE vulnerability in SAP NetWeaver AS Java (Guided Procedures)
[p2-CVSS 8.8]  0003417627 BC-JAS-SEC-UME - [CVE-2024-22126] Cross Site Scripting vulnerability in NetWeaver AS Java (User A
[p2-CVSS 7.4]  0003424610 BC-MID-SCC - [CVE-2024-25642] Improper Certificate Validation in SAP Cloud Connector
[p3-CVSS 5.4]  0003404025 KM-SEN-CMP - [CVE-2024-22129] Cross-Site Scripting (XSS) vulnerability in SAP Companion
[p2-CVSS 7.4]  0003421659 XX-IDES - [CVE-2024-22132] Code Injection vulnerability in SAP IDES Systems

SAP Security: PatchDay_2024-02
Version: 001
Date:    15.02.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 4.3] 0003419022 BC-SRV-APS-APJ - [CVE-2024-27900]Missing Authorization check in SAP ABAP Platform
[p3-CVSS 4.6] 0003417399 PA-FIO-LEA - [CVE-2024-22133] Improper Access Control in SAP Fiori Front End Server
[p3-CVSS 5.4]  0003377979 BC-FES-WGU - [CVE-2024-27902] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS AB
			kernel

The policy does not check the following Security Notes:

[p3-CVSS 5.3]  0003425682 BC-ESI-WS-JAV-RT - [CVE-2024-25644] Information Disclosure vulnerability in SAP NetWeaver (WSRM)
[p1-CVSS 10.0]  0002622660 BC-FES-BUS-DSK - Security updates for the browser control Google Chromium delivered with SAP Business
[p1-CVSS 9.1]  0003433192 BC-JAS-ADM-LOG - [CVE-2024-22127] Code Injection vulnerability in SAP NetWeaver AS Java (Administ
[p3-CVSS 5.3]  0003434192 BC-XI-IBF-UI - [CVE-2024-28163] Information Disclosure vulnerability in SAP NetWeaver Process I
[p2-CVSS 7.2]  0003414195 BI-BIP-CMC - [CVE-2023-50164] Path Traversal Vulnerability in SAP BusinessObjects Business In
[p1-CVSS 9.4]  0003425274 CA-LCA-ACP - [CVE-2019-10744] Code Injection vulnerability in applications built with SAP Bui
[p2-CVSS 8.8]  0003346500 CEC-SCC-PLA-PL - [CVE-2023-39439] Improper authentication in SAP Commerce Cloud
[p3-CVSS 5.3]  0003428847 EP-PIN-APF-OPR - [CVE-2024-25645] Information Disclosure vulnerability in SAP NetWeaver (EP)
[p2-CVSS 7.5]  0003410615 HAN-AS-XS - [CVE-2023-44487 ] Denial of service (DOS) in SAP HANA XS Classic and HANA XS Advanced

SAP Security: PatchDay_2024-03
Version: 001
Date:    14.03.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p2-CVSS 7.2] 0003438234 FI-AA-AA-A - [CVE-2024-27901] Directory Traversal vulnerability in SAP Asset Accounting
[p3-CVSS 4.3] 0003427178 FIN-FSCM-CLM-BAM - [CVE-2024-30216] Missing Authorization check in SAP S/4 HANA (Cash Management)
[p3-CVSS 4.3] 0003430173 FIN-FSCM-CLM-BAM - [CVE-2024-30217] Missing Authorization check in SAP S/4 HANA (Cash Management)
[p3-CVSS 6.1] 0003156972 MM-FIO-PUR-REQ-SSP - [CVE-2023-40306] URL Redirection vulnerability in SAP S/4HANA (Manage Catalog It
        plus manual activities
[p3-CVSS 6.5] 0003164677 PA-FIO-LEA - [CVE-2022-29613] Information Disclosure vulnerability in SAP Employee Self Servi
[p3-CVSS 6.5] 0003442378 FIN-CS-CDC-DC - [CVE-2024-28167] Missing Authorization check in SAP Group Reporting Data Collect
                check correction of 3443941
[p3-CVSS 6.5] 0003359778 BC-CST-DP - [CVE-2024-30218] Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP
	       kernel delivers default value for rdisp/traffic_control; "you must maintain the parameter ..."

The policy does not check the following Security Notes:

[p3-CVSS 5.3]  0003425188 BC-ESI-WS-JAV-RT - [CVE-2024-27898] Server-Side Request Forgery in SAP NetWeaver (tc~esi~esp~grmg~wshealthcheck~ear)
[p2-CVSS 8.8]  0003434839 BC-JAS-SEC-UME - [CVE-2024-27899] Security misconfiguration vulnerability in SAP NetWeaver AS Jav
[p3-CVSS 4.8]  0003421453 BC-MID-BUS - [Multiple CVEs] Cross-Site Scripting (XSS) vulnerabilities in SAP Business Conne
[p2-CVSS 7.7]  0003421384 BI-RA-WBI - [CVE-2024-25646] Information Disclosure vulnerability in SAP BusinessObjects Web
[p3-CVSS 6.8]  0003442741 LOD-HCI-PI-OP-NM - Stack overflow vulnerability on the component images of SAP Integration Suite

SAP Security: PatchDay_2024-04
Version: 001
Date:    11.04.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 6.1] 0003450286 BC-MID-AC - [CVE-2024-32733] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Appli
[p3-CVSS 6.5] 0003448445 BC-SRV-GBT-GOS - [CVE-2024-34687] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Appli
[p1-CVSS 9.6] 0003448171 BC-SRV-KPR-CMS - [CVE-2024-33006] File upload vulnerability in SAP NetWeaver Application Server A
                        plus manual activities, see note 3448453
[p3-CVSS 4.2] 0001938764 EHS-SAF-GLM - [CVE-2024-33009] SQL injection vulnerability in SAP Global Label Management (GLM
[p3-CVSS 4.3] 0003434666 FI-FIO-AR-PAY - [Multiple CVEs] Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statem
[p3-CVSS 5.5] 0003447467 FI-TV-ODT-MTR - [CVE-2024-32731] Missing Authorization check in SAP My Travel Requests
[p4-CVSS 3.5] 0003392049 FIN-FSCM-CLM-BAM - [CVE-2024-33000] Missing Authorization check in SAP Bank Account Management
[p3-CVSS 6.1] 0003460772 BC-EIM-ESH - [CVE-2024-33002] Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA
            correction via 0003449741 - Deactivate obsolete class method

The policy does not check the following Security Notes:

[p4-CVSS 3.5] 0003446076 CA-UI5-SC - [CVE-2024-33007] Client-side script execution vulnerability in SAP UI5(PDFViewer
           manual: Please install the newest UI5 Patch - see note 3155948
[p1-CVSS 10.0]  0002622660 BC-FES-BUS-DSK - Security updates for the browser control Google Chromium delivered with SAP Busi
[p3-CVSS 4.9]  0003349468 BC-SYB-REP - [CVE-2024-33008] Memory Corruption vulnerability in SAP Replication Server
[p3-CVSS 4.3]  0002174651 BC-XI-IBC - Potential information disclosure relating to PI Integration Directory
[p3-CVSS 5.3]  0002745860 BC-XI-IBD-INF - Information Disclosure in Enterprise Services Repository of SAP Process Integrat
[p2-CVSS 8.1]  0003431794 BI-BIP-INV - [CVE-2024-28165] Cross site scripting vulnerability in SAP BusinessObjects Busin
[p3-CVSS 4.3]  0003449093 BI-BIP-INV - [CVE-2024-33004] Insecure Storage vulnerability in SAP BusinessObjects Business
[p1-CVSS 9.8]  0003455438 CEC-SCC-PLA-PL - [CVE-2019-17495] Multiple vulnerabilities in SAP CX Commerce
[p3-CVSS 6.5]  0003441944 KM-SEN-MGR - [CVE-2024-32730] Missing authorization check in SAP Enable Now Manager


SAP Security: PatchDay_2024-05
Version: 002   - Update check for note BC-EIM-ESH 0003460772
Date:    23.05.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 6.5] 0003459379 CA-GTF-DOB - [CVE-2024-34683] Unrestricted file upload in SAP Document Builder (HTTP service) (Version 8)
		 +++ manual activities
[p3-CVSS 6.5] 0003453170 SV-SMG-SDD - [CVE-2024-33001] Denial of service (DOS) in SAP NetWeaver and ABAP platform (Version 7)
[p3-CVSS 6.5] 0003466175 FI-FIO-AR-PAY - [CVE-2024-34691] Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files) (Version 10)
[p3-CVSS 6.1] 0003465129 CA-WUI-UI - [CVE-2024-34686] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI) (Version 7)
[p3-CVSS 6.1] 0003450286 BC-MID-AC - [CVE-2024-32733] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 12)
[p3-CVSS 5.5] 0003465455 BW4-DM-TRFN - [CVE-2024-37176] Missing Authorization check in SAP BW/4HANA Transformation and DTP (Version 11)
		 +++ manual activities
[p3-CVSS 5.4] 0003457265 IS-HER-CM-AD - [CVE-2024-34690] Missing Authorization check in SAP Student Life Cycle Management (SLcM) (Version 13)
[p4-CVSS 3.9] 0002638217 FI-CF-INF - Switchable Authorization Checks in Central Finance Infrastructure Components (Version 3)
		 +++ manual activities
[p4-CVSS 3.5] 0003392049 FIN-FSCM-CLM-BAM - [CVE-2024-33000] Missing Authorization check in SAP Bank Account Management (Version 8)

The policy does not check the following Security Notes:

[p2-CVSS 8.1] 0003457592 EPM-BFC-TCL - [CVE-2024-37177] Cross-Site Scripting (XSS) vulnerabilities in SAP Financial Consolidation (Version 11)
[p2-CVSS 7.5] 0003460407 BC-DWB-JAV-MMR - [CVE-2024-34688] Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Repository) (Version 11)
[p3-CVSS 5.3] 0003425571 BC-GP - [CVE-2024-28164] Information Disclosure vulnerability in SAP NetWeaver AS Java (Guided Procedures) (Version 10)
[p4-CVSS 3.7] 0003441817 BI-BIP-PUB - [CVE-2024-34684] Information Disclosure vulnerability in SAP BusinessObjects Business Intelligence Platform (Scheduling) (Version 11)



SAP Security: PatchDay_2024-06
Version: 001
Date:    13.06.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 5.0] 0003458789 BC-BMT-WFM - [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow S
		+ manual activities
[p3-CVSS 5.0] 0003483993 BC-BMT-WFM - [CVE-2024-34689] Prerequisite for Security Note 3458789
		+ manual activities
[p3-CVSS 4.7] 0003456952 BC-MID-ICF - [CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Serve
[p3-CVSS 4.1] 0003454858 BC-SRV-DX-DXW - [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Applicati
		+ manual activities
[p3-CVSS 6.1] 0003482217 BW-PLA-BPS - [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Busi

[p3-CVSS 6.5] 0003459379 CA-GTF-DOB - [CVE-2024-34683] Unrestricted file upload in SAP Document Builder (HTTP service)
[p3-CVSS 4.1] 0003101986 CA-WUI-UI - Prepare CSP support for On-Premise down port for code dependency in SAP CRM WebClient UI
		+ manual activities
[p3-CVSS 6.1] 0003467377 CA-WUI-UI - [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI)
[p2-CVSS 7.7] 0003483344 FIN-BA - [CVE-2024-39592] Missing Authorization check in SAP PDCE
[p3-CVSS 5.4] 0003457354 FIN-FSCM-PF-IHB - [CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Pa
[p3-CVSS 5.0] 0003469958 TM-CP - [CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Manage

The policy does not check the following Security Notes:
[p3-CVSS 5.0] 0003485805 BC-BMT-WFM - [CVE-2024-34689] Allowlisting of callback-URLs in SAP Business Workflow (WebFlow
[p3-CVSS 6.9] 0003466801 BC-VCM-LVM - [CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Managemen
[p3-CVSS 5.0]  0003461110 BC-FES-GUI - [CVE-2024-39600] Information Disclosure vulnerability in SAP GUI for Windows
[p2-CVSS 7.2]  0003490515 CEC-SCC-COM-BC-CS - [CVE-2024-39597] Improper Authorization Checks on Early Login Composable Storefr
[p3-CVSS 6.1]  0003468681 EP-PIN-WPC-WCM - [CVE-2024-34685] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Knowl
[p4-CVSS 3.3]  0003476340 KM-SEN-MGR - [CVE-2024-34692] Unrestricted File upload vulnerability in SAP Enable Now
[p3-CVSS 4.3]  0003476348 KM-SEN-MGR - [CVE-2024-39596] Missing Authorization check vulnerability in SAP Enable Now

SAP Security: PatchDay_2024-07
Version: 001
Date:    11.07.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 5.0] 0003458789 BC-BMT-WFM - [CVE-2024-34689] Server-Side Request Forgery in SAP Business Workflow (WebFlow S
[p3-CVSS 4.7] 0003468102 BC-FES-BUS-RUN - [CVE-2024-41732] Improper Access Control in SAP Netweaver Application Server ABA
[p3-CVSS 4.1] 0003454858 BC-SRV-DX-DXW - [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Applicati

[p3-CVSS 4.3] 0003494349 BC-SRV-LIM - [CVE-2024-41734] Missing Authorization check in SAP NetWeaver Application Server

[p3-CVSS 6.1] 0003482217 BW-PLA-BPS - [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Busi
       "Execute the attached report mentioned in the manual correction instruction and afterwards apply this note
        Or apply the corresponding Support Package"
[p3-CVSS 5.5] 0003465455 BW4-DM-TRFN - [CVE-2024-37176] Missing Authorization check in SAP BW/4HANA Transformation and
                                   plus manual activitieds
[p2-CVSS 7.8] 0003423268 CA-ATP-SUP-2CL - [CVE-2023-30533] Prototype Pollution in SAP S/4 HANA (Manage Supply Protection)
[p3-CVSS 6.5] 0003474590 CA-EPT-SSC - [CVE-2024-42376] Multiple Missing Authorization Check vulnerabilities in SAP Sha

[p3-CVSS 6.5] 0003459379 CA-GTF-DOB - [CVE-2024-34683] Unrestricted file upload in SAP Document Builder (HTTP service)
[p3-CVSS 4.3] 0003477423 CA-GTF-DOB - [CVE-2024-39591] Missing Authorization check in SAP Document Builder
[p3-CVSS 5.0] 0003487537 CRM-MKT - [CVE-2024-41737] Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Ma

[p3-CVSS 4.5] 0003150704 FIN-FSCM-CLM-BAM - [CVE-2023-0023] Information Disclosure in SAP Bank Account Management (Manage Ba
[p3-CVSS 4.3] 0003479293 IS-HER-CM-AD - [CVE-2024-42373] Missing Authorization Check in SAP Student Life Cycle Managemen
[p3-CVSS 4.3] 0003475427 PM-FIO-WCM - [CVE-2024-41736] Information Disclosure vulnerability in SAP Permit to Work

The policy does not check the following Security Notes:

[p3-CVSS 6.3]  0003438085 BC-CST-IC - [CVE-2024-33005] Missing Authorization check in  SAP NetWeaver Application Serve
[p2-CVSS 7.5]  0003460407 BC-DWB-JAV-MMR - [CVE-2024-34688] Denial of service (DOS) in SAP NetWeaver AS Java (Meta Model Re
[p3-CVSS 6.5]  0003495876 BC-SYB-REP - [Multiple CVEs] Multiple vulnerabilities in SAP Replication Server (FOSS)
[p3-CVSS 6.9] 0003466801 BC-VCM-LVM - [CVE-2024-39593] Information Disclosure vulnerability in SAP Landscape Managemen

[p3-CVSS 4.3]  0003433545 BI-BIP-INV - [CVE-2024-42375] Multiple Unrestricted File Upload vulnerabilities in SAP Busine
[p1-CVSS 9.8]  0003479478 BI-BIP-INV - [CVE-2024-41730] Missing Authentication check in SAP BusinessObjects Business In
[p2-CVSS 8.2]  0003485284 BW-BEX-ET-WJR-EXP - [CVE-2024-42374] XML injection in SAP BEx Web Java Runtime Export Web Service

[p1-CVSS 9.1]  0003477196 CA-LCA-ACP - [CVE-2024-29415] Server-Side Request Forgery vulnerability in applications built
[p2-CVSS 7.4]  0003459935 CEC-COM-CPS-COR - [CVE-2024-33003] Information Disclosure Vulnerability in SAP Commerce Cloud
[p3-CVSS 5.4]  0003483256 CEC-SCC-CDM-BO-FRW - [CVE-2024-41735] Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backof
[p3-CVSS 5.3]  0003471450 CEC-SCC-COM-BC-BCOM - [CVE-2024-41733] Information Disclosure Vulnerability in SAP Commerce

SAP Security: PatchDay_2024-08
Version: 001
Date:    15.08.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:


[p4-CVSS 2.0] 0003507252 BC-ABA-LA - [CVE-2024-44114] Missing Authorization check in SAP NetWeaver Application Server
[p3-CVSS 5.4] 0003488039 BC-DWB-SEM - [Multiple CVEs] Multiple vulnerabilities in SAP NetWeaver Application Server for
[p4-CVSS 2.7] 0003496410 BC-DWB-TOO-ABA - [CVE-2024-41728] Missing Authorization check in SAP NetWeaver Application Server
[p3-CVSS 4.3] 0003481588 BW-BEX-ET-WB-7X - [CVE-2024-41729] Information Disclosure vulnerability in the SAP NetWeaver BW (B
[p3-CVSS 4.3] 0003481992 BW-BEX-ET-WB-7X - [CVE-2024-44113] Information Disclosure vulnerability in the SAP Business Wareho
[p3-CVSS 6.1] 0003501359 CA-GTF-PCF - [CVE-2024-45279] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Appli
[p3-CVSS 4.3] 0003437585 FI-LOC-SRF-RUN - [CVE-2024-44121] Information Disclosure in SAP S/4 HANA (Statutory Reports)
[p4-CVSS 2.7] 0002256627 IS-HER-CM - [CVE-2024-45284] Missing authorization check in SAP Student Life Cycle Managemen
[p3-CVSS 4.3] 0003505293 IS-OIL-DS-TD - [CVE-2024-44112] Missing Authorization check in SAP for Oil & Gas (Transportatio
[p3-CVSS 6.5] 0003488341 IS-OIL-PRA-REV-OW - [CVE-2024-45286] Missing Authorization check in SAP Production and Revenue Accou
[p3-CVSS 6.1] 0003497347 MM-PUR-SSP - [CVE-2024-42378] Cross-Site Scripting (XSS) in eProcurement on S/4HANA

The policy does not check the following Security Notes:


[p3-CVSS 6.0]  0003477359 BC-JAS-SEC-DST - [CVE-2024-45283] Information disclosure vulnerability in SAP NetWeaver AS for Ja
[p3-CVSS 4.8]  0003505503 BC-JAS-SEC-LGN - [CVE-2024-45280] Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver AS Ja
[p3-CVSS 4.7]  0003498221 BC-PIN-PCD - [CVE-2024-44120] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enter
[p3-CVSS 6.5]  0003495876 BC-SYB-REP - [Multiple CVEs] Multiple vulnerabilities in SAP Replication Server (FOSS)
[p1-CVSS 9.8]  0003479478 BI-BIP-INV - [CVE-2024-41730] Missing Authentication check in SAP BusinessObjects Business In
[p3-CVSS 5.8]  0003425287 BI-RA-WBI-BE - [CVE-2024-45281] DLL hijacking vulnerability in SAP BusinessObjects Business Int
[p2-CVSS 7.4]  0003459935 CEC-COM-CPS-COR - [CVE-2024-33003] Information Disclosure Vulnerability in SAP Commerce Cloud
[p3-CVSS 5.9]  0003430336 CEC-SCC-PLA-PL - [CVE-2013-3587] Information Disclosure vulnerability in SAP Commerce Cloud

SAP Security: PatchDay_2024-09
Version: 001
Date:    12.09.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 4.1] 0003454858 BC-SRV-DX-DXW - [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Applicati
               + manual acttivities
[p3-CVSS 4.3] 0003481588 BW-BEX-ET-WB-7X - [CVE-2024-41729] Information Disclosure vulnerability in the SAP NetWeaver BW (B
[p3-CVSS 4.3] 0003251893 FI-FIO-AR - [CVE-2024-45282] HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)
[p2-CVSS 7.7] 0003483344 FIN-BA - [CVE-2024-39592] Missing Authorization check in SAP PDCE
[p3-CVSS 4.3] 0003479293 IS-HER-CM-AD - [CVE-2024-42373] Missing Authorization Check in SAP Student Life Cycle Managemen
	"Implement the note only if you are using the product SLCM or the switch ISHERCM_MAIN is activated in the system."

The policy does not check the following Security Notes:

[p3-CVSS 6.0]  0003477359 BC-JAS-SEC-DST - [CVE-2024-45283] Information disclosure vulnerability in SAP NetWeaver AS for Ja
[p3-CVSS 6.5]  0003495876 BC-SYB-REP - [Multiple CVEs] Multiple vulnerabilities in SAP Replication Server (FOSS)
[p1-CVSS 9.8]  0003479478 BI-BIP-INV - [CVE-2024-41730] Missing Authentication check in SAP BusinessObjects Business In
[p2-CVSS 7.7]  0003478615 BI-RA-WBI-BE - [CVE-2024-37179] Insecure File Operations vulnerability in SAP BusinessObjects B
[p2-CVSS 8.0]  0003523541 CA-EPC - [CVE-2022-23302] Multiple vulnerabilities in SAP Enterprise Project Connection
[p3-CVSS 5.4]  0003507545 CEC-SCC-CDM-BO-APP - [CVE-2024-45278] Cross-Site Scripting (XSS) vulnerability in SAP Commerce Backof
[p3-CVSS 5.4]  0003503462 EP-KM-ADM-CFG - [CVE-2024-47594] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enter
[p3-CVSS 4.3]  0003520100 HAN-DB-CLI - [CVE-2024-45277] Prototype Pollution vulnerability in SAP HANA Client

SAP Security: PatchDay_2024-10
Version: 001
Date:    10.10.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 4.3] 0003508947 BC-FES-WGU - [CVE-2024-47593] Information Disclosure Vulnerability in SAP NetWeaver Applicati
[p2-CVSS 7.7] 0003483344 FIN-BA - [CVE-2024-39592] Missing Authorization check in SAP PDCE
[p4-CVSS 3.5] 0003392049 FIN-FSCM-CLM-BAM - [CVE-2024-33000] Missing Authorization check in SAP Bank Account Management
[p4-CVSS 3.5] 0003498470 FIN-FSCM-CLM-COP - [CVE-2024-47587] Missing authorization check in SAP Cash Management (Cash Operat
[p3-CVSS 5.3]  0003504390 BC-ABA-LA - [CVE-2024-47586] NULL Pointer Dereference vulnerability in SAP NetWeaver Applica

The policy does not check the following Security Notes:

[p3-CVSS 6.3]  0003509619 BC-CCM-HAG - [CVE-2024-47595] Local Privilege Escalation in SAP Host Agent
[p3-CVSS 6.5]  0003335394 BC-CCM-SLD - [CVE-2024-42372] Missing Authorization check in SAP NetWeaver AS Java (System La
[p2-CVSS 8.8]  0003520281 BC-CST-WDP - [CVE-2024-47590] Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher

[p3-CVSS 5.3]  0003393899 BC-JAS-SEC - [CVE-2024-47592] Information Disclosure Vulnerability in SAP NetWeaver Applicati
[p3-CVSS 4.7]  0003522953 BC-UPG-TLS-TLJ - [CVE-2024-47588] Information Disclosure vulnerability in SAP NetWeaver Java (Sof

SAP Security: PatchDay_2024-11
Version: 001
Date:    14.11.2024
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

[p3-CVSS 4.3] 0003536361 BC-MID-UCO - [CVE-2024-47585] Missing Authorization check in SAP NetWeaver Application Server
[p3-CVSS 4.3] 0003522332 PA-FIO-TS - [CVE-2024-47581] Missing Authorization check in SAP HCM (Approve Timesheets vers
[p2-CVSS 7.5]  0003504390 BC-ABA-LA - [CVE-2024-47586] NULL Pointer Dereference vulnerability in SAP NetWeaver Applica
      kernel
[p2-CVSS 8.5]  0003469791 BC-MID-RFC - [CVE-2024-54198] Information Disclosure vulnerability through Remote Function Ca
     kernel

The policy does not check the following Security Notes:

[p4-CVSS 3.3] 0003504847 PLM-PLC - [CVE-2024-47576] DLL Hijacking vulnerability in SAP Product Lifecycle Costing

[p3-CVSS 5.3]  0003351041 BC-CCM-SLD - [CVE-2024-47582] XML Entity Expansion Vulnerability in SAP NetWeaver AS JAVA
[p2-CVSS 8.8]  0003520281 BC-CST-WDP - [CVE-2024-47590] Cross-Site Scripting (XSS) vulnerability in SAP Web Dispatcher
[p2-CVSS 7.2]  0003542543 BC-JAS-ADM-MON - [CVE-2024-54197] Server-Side Request Forgery in SAP NetWeaver Administrator (Sys

[p1-CVSS 9.1]  0003536965 BC-SRV-FP - [CVE-2024-47578] Multiple vulnerabilities in SAP NetWeaver AS for JAVA(Adobe Doc
[p3-CVSS 4.3]  0003433545 BI-BIP-INV - [CVE-2024-42375] Multiple Unrestricted File Upload vulnerabilities in SAP Busine
[p3-CVSS 4.3]  0003515653 BI-BIP-INV - Update 1 to Security Note 3433545: [CVE-2024-42375] Multiple Unrestricted File U
[p3-CVSS 5.3]  0003524933 BI-BIP-SEC - [CVE-2024-32732] Information Disclosure vulnerability in SAP BusinessObjects Bus
[p4-CVSS 2.7]  0003535451 CEC-SCC-COM-AS - [CVE-2024-47577] Information Disclosure vulnerability in SAP Commerce Cloud

SAP Security: PatchDay_2024-12
Version: 001
Date:    10.12.2024
-->
<targetsystem xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" desc="Secnotes2024" id="Secnotes2024" multisql="Yes" version="0000" xsi:schemaLocation="csa_policy.xsd">
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.4] Note 0003411869 exists" id="0003411869" operator="check_note">
      <compliant>NOTE = '0003411869' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.4] Note 0003411869 missing and solution with SP available" id="0003411869" operator="check_note:0003411869">
      <compliant>(
      ( COMPONENT = 'AIF' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 

        <!-- AIF 702 SAPK-70210INAIF -->


       or ( COMPONENT = 'AIF' and VERSION &gt; '702' )
     )

      </compliant>
      <noncompliant>(
      ( COMPONENT = 'AIF' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0010' )  

        <!-- AIF 702 SAPK-70210INAIF -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.4] Note 0003411869 missing and applicable using Correction Instruction" id="0003411869" operator="check_note:0003411869">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'AIF' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0009' )  

        <!-- AIF 702 702 - SAPK-70209INAIF  -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.1]  BC-SRV-COM 0003387737 - [CVE-2024-21738] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP (Version 0010)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.1] Note 0003387737 exists" id="0003387737" operator="check_note">
      <compliant>NOTE = '0003387737' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003387737 missing and solution with SP available" id="0003387737" operator="check_note:0003387737">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 

        <!-- SAP_BASIS 700 SAPKB70042 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 

        <!-- SAP_BASIS 701 SAPKB70127 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 

        <!-- SAP_BASIS 702 SAPKB70227 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 

        <!-- SAP_BASIS 731 SAPKB73134 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 

        <!-- SAP_BASIS 740 SAPKB74031 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 

        <!-- SAP_BASIS 750 SAPK-75029INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 

        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 

        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 

        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 

        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 

        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 

        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 

        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 

        <!-- SAP_BASIS 758 SAPK-75801INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '793' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 

        <!-- SAP_BASIS 793 SAPK-79310INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '794' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 

        <!-- SAP_BASIS 794 SAPK-79404INSAPBASIS -->


     )

      </compliant>
      <noncompliant>(
          ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  

        <!-- SAP_BASIS 700 SAPKB70042 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  

        <!-- SAP_BASIS 701 SAPKB70127 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  

        <!-- SAP_BASIS 702 SAPKB70227 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  

        <!-- SAP_BASIS 731 SAPKB73134 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0031' )  

        <!-- SAP_BASIS 740 SAPKB74031 -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0029' )  

        <!-- SAP_BASIS 750 SAPK-75029INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0018' )  

        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0014' )  

        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0012' )  

        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0010' )  

        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0008' )  

        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  

        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  

        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0001' )  

        <!-- SAP_BASIS 758 SAPK-75801INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '793' and (lpad(SP,4,'0'))  &lt; '0010' )  

        <!-- SAP_BASIS 793 SAPK-79310INSAPBASIS -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '794' and (lpad(SP,4,'0'))  &lt; '0004' )  

        <!-- SAP_BASIS 794 SAPK-79404INSAPBASIS -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003387737 missing and applicable using Correction Instruction" id="0003387737" operator="check_note:0003387737">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0006' and '0041' )  

        <!-- SAP_BASIS 700 SAPKB70006 - SAPKB70041  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  

        <!-- SAP_BASIS 701 701 - SAPKB70126  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  

        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0033' )  

        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73133  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0030' )  

        <!-- SAP_BASIS 740 740 - SAPKB74030  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0028' )  

        <!-- SAP_BASIS 750 750 - SAPK-75028INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0017' )  

        <!-- SAP_BASIS 751 751 - SAPK-75117INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0013' )  

        <!-- SAP_BASIS 752 752 - SAPK-75213INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0011' )  

        <!-- SAP_BASIS 753 753 - SAPK-75311INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0009' )  

        <!-- SAP_BASIS 754 754 - SAPK-75409INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0007' )  

        <!-- SAP_BASIS 755 755 - SAPK-75507INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  

        <!-- SAP_BASIS 756 756 - SAPK-75605INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  

        <!-- SAP_BASIS 757 757 - SAPK-75703INSAPBASIS  -->

          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0000' )  

        <!-- SAP_BASIS 758 758 - 758  -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <!-- p4-CVSS 3.7]  CEC-MKT-DM-CON 0003190894 - [CVE-2024-21734] URL Redirection vulnerability in SAP Marketing (Contacts App) (Version 0013)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.7] Note 0003190894 exists" id="0003190894" operator="check_note">
      <compliant>NOTE = '0003190894' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.7] Note 0003190894 missing and solution with SP available" id="0003190894" operator="check_note:0003190894">
      <compliant>(
      ( COMPONENT = 'UICUAN' and VERSION = '160' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 

        <!-- UICUAN 160 SAPK-16001INUICUAN -->


     )

      </compliant>
      <noncompliant>(
      ( COMPONENT = 'UICUAN' and VERSION = '160' and (lpad(SP,4,'0'))  &lt; '0001' )  

        <!-- UICUAN 160 SAPK-16001INUICUAN -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.7] Note 0003190894 missing and applicable using Correction Instruction" id="0003190894" operator="check_note:0003190894">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'UICUAN' and VERSION = '160' and lpad(SP,4,'0') = '0000' )  

        <!-- UICUAN 160 160 - 160  -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.4]  FIN-FSCM-PF-IHB 0003260667 - [CVE-2024-21736] Missing Authorization check in SAP S/4HANA Finance (Advanced Pa (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.4] Note 0003260667 exists" id="0003260667" operator="check_note">
      <compliant>NOTE = '0003260667' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.4] Note 0003260667 missing and solution with SP available" id="0003260667" operator="check_note:0003260667">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 

        <!-- S4CORE 107 SAPK-10701INS4CORE -->


     )

      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0001' )  

        <!-- S4CORE 107 SAPK-10701INS4CORE -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.4] Note 0003260667 missing and applicable using Correction Instruction" id="0003260667" operator="check_note:0003260667">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') = '0000' )  

        <!-- S4CORE 107 107 - 107  -->


     )

      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.5] 0003389917 BC-CST-IC - [CVE-2023-44487] Denial of service (DOS) in SAP Web Dispatcher, SAP NetWeaver Application server ABAP, and ABAP Platform (Version 2) -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1236'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1236'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) = 'TRUE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) = 'TRUE' </joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0232'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0232'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) = 'TRUE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) = 'TRUE' </joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0627'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0627'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0325'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0325'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '785_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '785_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0223'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0223'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0065'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0065'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0016'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0016'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '794_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '794_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3389917v2" id="0003389917_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0004'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0004'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '795_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '795_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="ABAP_INSTANCE_PAHI">
        <joincompliant>    NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joincompliant>
        <joinnoncompliant> NAME like 'icm/HTTP/support_http2' and UPPER(VALUE) != 'FALSE' </joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.1] 0003392626 BC-CST-IC - [CVE-2024-22124] Information Disclosure vulnerability in SAP NetWeaver Internet Communication Manager (Version 5) -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 4.1] Kernel patch required for SNote 3392626v5" id="0003392626_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1314'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1314'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] Kernel patch required for SNote 3392626v5" id="0003392626_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1233'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1233'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] Kernel patch required for SNote 3392626v5" id="0003392626_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0229'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0229'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.7] Note 0003396109 missing and solution with SP available" id="0003396109" operator="check_note:0003396109">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 731 SAPKB73134 -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_UI 754 SAPK-75415INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_UI 755 SAPK-75512INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_UI 756 SAPK-75609INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_UI 757 SAPK-75706INSAPUI -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 731 SAPKB73134 -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_UI 754 SAPK-75415INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_UI 755 SAPK-75512INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_UI 756 SAPK-75609INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_UI 757 SAPK-75706INSAPUI -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.7] Note 0003396109 missing and applicable using Correction Instruction" id="0003396109" operator="check_note:0003396109">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0033' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70033 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0018' and '0026' )  
        <!-- SAP_BASIS 701 SAPKB70118 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0018' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70218 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0019' and '0033' )  
        <!-- SAP_BASIS 731 SAPKB73119 - SAPKB73133  -->
         or
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0014' )  
        <!-- SAP_UI 754 SAPK-75401INSAPUI - SAPK-75414INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and lpad(SP,4,'0') between '0001' and '0011' )  
        <!-- SAP_UI 755 SAPK-75501INSAPUI - SAPK-75511INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0008' )  
        <!-- SAP_UI 756 SAPK-75601INSAPUI - SAPK-75608INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- SAP_UI 757 SAPK-75701INSAPUI - SAPK-75705INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_UI 758 758 - ALL_SP  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.3]  BC-FES-WGU 0003385711 - [CVE-2023-49580] Information disclosure vulnerability in SAP NetWeaver Applicati (Version 0009) (High) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.3] Note 0003385711 exists" id="0003385711" operator="check_note">
      <compliant>NOTE = '0003385711' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.3] Note 0003385711 missing and solution with SP available" id="0003385711" operator="check_note:0003385711">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 758 SAPK-75801INSAPBASIS -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 758 SAPK-75801INSAPBASIS -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.3] Note 0003385711 missing and applicable using Correction Instruction" id="0003385711" operator="check_note:0003385711">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 755 755 - SAPK-75507INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 756 756 - SAPK-75605INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 757 757 - SAPK-75703INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 758 758 - 758  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  CA-MDG-APP-MM 0002897391 - [CVE-2024-24741] Missing Authorization check in SAP Master Data Governance Mater (Version 0007)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0002897391 exists" id="0002897391" operator="check_note">
      <compliant>NOTE = '0002897391' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0002897391 missing and solution with SP available" id="0002897391" operator="check_note:0002897391">
      <compliant>(
      ( COMPONENT = 'MDG_APPL' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- MDG_APPL 618 SAPK-61818INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '619' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- MDG_APPL 619 SAPK-61916INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '620' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- MDG_APPL 620 SAPK-62010INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '621' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- MDG_APPL 621 SAPK-62108INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '622' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- MDG_APPL 622 SAPK-62204INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '800' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- MDG_APPL 800 SAPK-80011INMDGAPPL -->
         or
      ( COMPONENT = 'MDG_APPL' and VERSION = '801' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- MDG_APPL 801 SAPK-80108INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- MDG_APPL 802 SAPK-80206INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- MDG_APPL 803 SAPK-80304INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- MDG_APPL 804 SAPK-80402INMDGAPPL -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'MDG_APPL' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- MDG_APPL 618 SAPK-61818INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '619' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- MDG_APPL 619 SAPK-61916INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '620' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- MDG_APPL 620 SAPK-62010INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '621' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- MDG_APPL 621 SAPK-62108INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '622' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- MDG_APPL 622 SAPK-62204INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '800' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- MDG_APPL 800 SAPK-80011INMDGAPPL -->
         or
      ( COMPONENT = 'MDG_APPL' and VERSION = '801' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- MDG_APPL 801 SAPK-80108INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- MDG_APPL 802 SAPK-80206INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- MDG_APPL 803 SAPK-80304INMDGAPPL -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- MDG_APPL 804 SAPK-80402INMDGAPPL -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0002897391 missing and applicable using Correction Instruction" id="0002897391" operator="check_note:0002897391">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'MDG_APPL' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- MDG_APPL 618 618 - SAPK-61817INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '619' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- MDG_APPL 619 619 - SAPK-61915INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '620' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- MDG_APPL 620 620 - SAPK-62009INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '621' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- MDG_APPL 621 621 - SAPK-62107INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '622' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- MDG_APPL 622 622 - SAPK-62203INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- MDG_APPL 800 800 - SAPK-80010INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '801' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- MDG_APPL 801 801 - SAPK-80107INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- MDG_APPL 802 802 - SAPK-80205INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '803' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- MDG_APPL 803 803 - SAPK-80303INMDGAPPL  -->
          or
      ( COMPONENT = 'MDG_APPL' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- MDG_APPL 804 804 - SAPK-80401INMDGAPPL  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.5  CA-MDG-ML 0003363690 - [CVE-2023-49058] Directory Traversal vulnerability in SAP Master Data Governance (Version 0007) (Low) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5 Note 0003363690 exists" id="0003363690" operator="check_note">
      <compliant>NOTE = '0003363690' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5 Note 0003363690 missing and solution with SP available" id="0003363690" operator="check_note:0003363690">
      <compliant>(
      ( COMPONENT = 'MDG_FND' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- MDG_FND 731 SAPK-73133INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '732' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- MDG_FND 732 SAPK-73232INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- MDG_FND 747 SAPK-74728INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- MDG_FND 748 SAPK-74825INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '749' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- MDG_FND 749 SAPK-74923INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- MDG_FND 751 SAPK-75116INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- MDG_FND 752 SAPK-75212INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- MDG_FND 802 SAPK-80214INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- MDG_FND 803 SAPK-80312INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- MDG_FND 804 SAPK-80410INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- MDG_FND 805 SAPK-80508INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '806' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- MDG_FND 806 SAPK-80606INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '807' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- MDG_FND 807 SAPK-80704INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '808' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- MDG_FND 808 SAPK-80801INMDGFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SAP_BS_FND 702 SAPK-70224INSAPBSFND -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'MDG_FND' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- MDG_FND 731 SAPK-73133INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '732' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- MDG_FND 732 SAPK-73232INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- MDG_FND 747 SAPK-74728INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- MDG_FND 748 SAPK-74825INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '749' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- MDG_FND 749 SAPK-74923INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- MDG_FND 751 SAPK-75116INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- MDG_FND 752 SAPK-75212INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- MDG_FND 802 SAPK-80214INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- MDG_FND 803 SAPK-80312INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- MDG_FND 804 SAPK-80410INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- MDG_FND 805 SAPK-80508INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '806' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- MDG_FND 806 SAPK-80606INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '807' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- MDG_FND 807 SAPK-80704INMDGFND -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '808' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- MDG_FND 808 SAPK-80801INMDGFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SAP_BS_FND 702 SAPK-70224INSAPBSFND -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5 Note 0003363690 missing and applicable using Correction Instruction" id="0003363690" operator="check_note:0003363690">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'MDG_FND' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- MDG_FND 731 SAPK-73101INMDGFND - SAPK-73132INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '732' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- MDG_FND 732 732 - SAPK-73231INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- MDG_FND 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- MDG_FND 747 747 - SAPK-74727INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- MDG_FND 748 748 - SAPK-74824INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '749' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- MDG_FND 749 749 - SAPK-74922INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- MDG_FND 751 751 - SAPK-75115INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- MDG_FND 752 752 - SAPK-75211INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- MDG_FND 800 800 - ALL_SP  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- MDG_FND 802 802 - SAPK-80213INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '803' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- MDG_FND 803 803 - SAPK-80311INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- MDG_FND 804 804 - SAPK-80409INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '805' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- MDG_FND 805 805 - SAPK-80507INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '806' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- MDG_FND 806 806 - SAPK-80605INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '807' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- MDG_FND 807 807 - SAPK-80703INMDGFND  -->
          or
      ( COMPONENT = 'MDG_FND' and VERSION = '808' and lpad(SP,4,'0') = '0000' )  
        <!-- MDG_FND 808 808 - 808  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and lpad(SP,4,'0') between '0013' and '0023' )  
        <!-- SAP_BS_FND 702 SAPK-70213INSAPBSFND - SAPK-70223INSAPBSFND -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.1]  CA-SUR 0003420923 - [CVE-2024-22131] Code Injection vulnerability in SAP ABA (Application Basis) (Version 0013)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.1] Note 0003420923 exists" id="0003420923" operator="check_note">
      <compliant>NOTE = '0003420923' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.1] Note 0003420923 missing and solution with SP available" id="0003420923" operator="check_note:0003420923">
      <compliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_ABA 700 SAPKA70042 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_ABA 701 SAPKA70127 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_ABA 702 SAPKA70227 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_ABA 731 SAPKA73134 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_ABA 740 SAPKA74031 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_ABA 750 SAPK-75029INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_ABA 751 SAPK-75118INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_ABA 752 SAPK-75214INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_ABA 75C SAPK-75C14INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_ABA 75D SAPK-75D12INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_ABA 75E SAPK-75E10INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_ABA 75F SAPK-75F08INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_ABA 75G SAPK-75G06INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_ABA 75H SAPK-75H04INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_ABA 75I SAPK-75I02INSAPABA -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_ABA 700 SAPKA70042 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_ABA 701 SAPKA70127 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_ABA 702 SAPKA70227 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_ABA 731 SAPKA73134 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_ABA 740 SAPKA74031 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_ABA 750 SAPK-75029INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_ABA 751 SAPK-75118INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_ABA 752 SAPK-75214INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_ABA 75C SAPK-75C14INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_ABA 75D SAPK-75D12INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_ABA 75E SAPK-75E10INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_ABA 75F SAPK-75F08INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_ABA 75G SAPK-75G06INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_ABA 75H SAPK-75H04INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_ABA 75I SAPK-75I02INSAPABA -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.1] Note 0003420923 missing and applicable using Correction Instruction" id="0003420923" operator="check_note:0003420923">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and lpad(SP,4,'0') between '0000' and '0041' )  
        <!-- SAP_ABA 700 700 - SAPKA70041  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_ABA 701 701 - SAPKA70126  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_ABA 702 702 - SAPKA70226  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_ABA 731 731 - SAPKA73133  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_ABA 740 740 - SAPKA74030  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- SAP_ABA 750 750 - SAPK-75028INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- SAP_ABA 751 751 - SAPK-75117INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_ABA 752 752 - SAPK-75213INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_ABA 75C 75C - SAPK-75C13INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_ABA 75D 75D - SAPK-75D11INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_ABA 75E 75E - SAPK-75E09INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_ABA 75F 75F - SAPK-75F07INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_ABA 75G 75G - SAPK-75G05INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_ABA 75H 75H - SAPK-75H03INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_ABA 75I 75I - SAPK-75I01INSAPABA  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.6]  CA-WUI-UI 0003410875 - [CVE-2024-22130] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient (Version 0004)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.6] Note 0003410875 exists" id="0003410875" operator="check_note">
      <compliant>NOTE = '0003410875' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.6] Note 0003410875 missing and solution with SP available" id="0003410875" operator="check_note:0003410875">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- WEBCUIF 700 SAPK-70026INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- WEBCUIF 701 SAPK-70123INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- WEBCUIF 731 SAPK-73133INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- WEBCUIF 747 SAPK-74728INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- WEBCUIF 748 SAPK-74822INWEBCUIF -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- WEBCUIF 700 SAPK-70026INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- WEBCUIF 701 SAPK-70123INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- WEBCUIF 731 SAPK-73133INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- WEBCUIF 747 SAPK-74728INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- WEBCUIF 748 SAPK-74822INWEBCUIF -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.6] Note 0003410875 missing and applicable using Correction Instruction" id="0003410875" operator="check_note:0003410875">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4FND 102 102 - SAPK-10213INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4FND 103 103 - SAPK-10311INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4FND 104 104 - SAPK-10409INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4FND 105 105 - SAPK-10507INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 106 106 - SAPK-10605INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 107 107 - SAPK-10703INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4FND 108 108 - SAPK-10801INS4FND  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '700' and lpad(SP,4,'0') between '0001' and '0025' )  
        <!-- WEBCUIF 700 SAPK-70001INWEBCUIF - SAPK-70025INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0022' )  
        <!-- WEBCUIF 701 SAPK-70103INWEBCUIF - SAPK-70122INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '730' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 730 730 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- WEBCUIF 731 SAPK-73101INWEBCUIF - SAPK-73132INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- WEBCUIF 747 747 - SAPK-74727INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- WEBCUIF 748 748 - SAPK-74821INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 800 800 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '801' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 801 801 - ALL_SP  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.1]  CA-WUI-WKB 0003158455 - [CVE-2024-24742] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient (Version 0009)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.1] Note 0003158455 exists" id="0003158455" operator="check_note">
      <compliant>NOTE = '0003158455' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003158455 missing and solution with SP available" id="0003158455" operator="check_note:0003158455">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4FND 102 SAPK-10211INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4FND 103 SAPK-10309INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 104 SAPK-10406INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 105 SAPK-10504INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4FND 106 SAPK-10602INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- WEBCUIF 701 SAPK-70122INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- WEBCUIF 731 SAPK-73130INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- WEBCUIF 747 SAPK-74725INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- WEBCUIF 748 SAPK-74819INWEBCUIF -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4FND 102 SAPK-10211INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4FND 103 SAPK-10309INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 104 SAPK-10406INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 105 SAPK-10504INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4FND 106 SAPK-10602INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- WEBCUIF 701 SAPK-70122INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- WEBCUIF 731 SAPK-73130INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- WEBCUIF 747 SAPK-74725INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- WEBCUIF 748 SAPK-74819INWEBCUIF -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003158455 missing and applicable using Correction Instruction" id="0003158455" operator="check_note:0003158455">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0010' and '0010' )  
        <!-- S4FND 102 SAPK-10210INS4FND - SAPK-10210INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0003' and '0008' )  
        <!-- S4FND 103 SAPK-10303INS4FND - SAPK-10308INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 104 104 - SAPK-10405INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 105 105 - SAPK-10503INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4FND 106 106 - SAPK-10601INS4FND  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and lpad(SP,4,'0') between '0009' and '0021' )  
        <!-- WEBCUIF 701 SAPK-70109INWEBCUIF - SAPK-70121INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- WEBCUIF 731 SAPK-73101INWEBCUIF - SAPK-73129INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- WEBCUIF 747 747 - SAPK-74724INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- WEBCUIF 748 748 - SAPK-74818INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 800 800 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '801' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 801 801 - ALL_SP  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.3]  FIN-FSCM-CLM 0002637727 - [CVE-2024-24739] Missing authorization check in SAP Bank Account Management (Version 0013)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.3] Note 0002637727 exists" id="0002637727" operator="check_note">
      <compliant>NOTE = '0002637727' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.3] Note 0002637727 missing and solution with SP available" id="0002637727" operator="check_note:0002637727">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 100 SAPK-10007INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 101 SAPK-10105INS4CORE -->
         or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_FIN 618 SAPK-61811INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_FIN 730 SAPK-73012INSAPFIN -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 100 SAPK-10007INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 101 SAPK-10105INS4CORE -->
         or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_FIN 618 SAPK-61811INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_FIN 730 SAPK-73012INSAPFIN -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.3] Note 0002637727 missing and applicable using Correction Instruction" id="0002637727" operator="check_note:0002637727">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 100 100 - SAPK-10006INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 101 101 - SAPK-10104INS4CORE  -->
         or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and lpad(SP,4,'0') between '0001' and '0010' )  
        <!-- SAP_FIN 618 SAPK-61801INSAPFIN - SAPK-61810INSAPFIN  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and lpad(SP,4,'0') between '0003' and '0011' )  
        <!-- SAP_FIN 730 SAPK-73003INSAPFIN - SAPK-73011INSAPFIN  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  PA-FIO-OVT 0003237638 - [CVE-2024-25643] Missing authorization check in SAP Fiori app ("My Overtime Requ (Version 0008)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003237638 exists" id="0003237638" operator="check_note">
      <compliant>NOTE = '0003237638' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003237638 missing and solution with SP available" id="0003237638" operator="check_note:0003237638">
      <compliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- GBX01HR5 605 SAPK-60524INGBX01HR5 -->

     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- GBX01HR5 605 SAPK-60524INGBX01HR5 -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003237638 missing and applicable using Correction Instruction" id="0003237638" operator="check_note:0003237638">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and lpad(SP,4,'0') between '0021' and '0023' )  
        <!-- GBX01HR5 605 SAPK-60521INGBX01HR5 - SAPK-60523INGBX01HR5  -->

     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.3]  BC-FES-ITS 0003360827 - [CVE-2024-24740] Information Disclosure vulnerability in SAP NetWeaver Applicati (Version 0012)  -->
  <configstore name="SAP_KERNEL">
    <!--   722 not provided yet , to be adjusted
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1316'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1316'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    -->
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1222'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1222'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0218'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0218'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0613'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0613'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0311'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0311'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '785_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '785_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0210'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0210'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0014'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0014'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] Kernel patch required for SNote 3360827" id="0003360827_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0002'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0002'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '794_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '794_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003419022 missing and solution with SP available" id="0003419022" operator="check_note:0003419022">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 795 SAPK-79503INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 795 SAPK-79503INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003419022 missing and applicable using Correction Instruction" id="0003419022" operator="check_note:0003419022">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.6]  PA-FIO-LEA 0003417399 - [CVE-2024-22133] Improper Access Control in SAP Fiori Front End Server (Version 0016)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.6] Note 0003417399 exists" id="0003417399" operator="check_note">
      <compliant>NOTE = '0003417399' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.6] Note 0003417399 missing and solution with SP available" id="0003417399" operator="check_note:0003417399">
      <compliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- GBX01HR5 605 SAPK-60530INGBX01HR5 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- GBX01HR5 605 SAPK-60530INGBX01HR5 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.6] Note 0003417399 missing and applicable using Correction Instruction" id="0003417399" operator="check_note:0003417399">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and lpad(SP,4,'0') between '0010' and '0029' )  
        <!-- GBX01HR5 605 SAPK-60510INGBX01HR5 - SAPK-60529INGBX01HR5  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4]  0003377979 BC-FES-WGU - [CVE-2024-27902] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver AS ABAP -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 5.4] Kernel patch required for SNote 3377979" id="0003377979_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0213'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0213'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.4] Kernel patch required for SNote 3377979" id="0003377979_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0060'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0060'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.2] Note 0003438234 exists" id="0003438234" operator="check_note">
      <compliant>NOTE = '0003438234' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.2] Note 0003438234 missing and solution with SP available" id="0003438234" operator="check_note:0003438234">
      <compliant>(
      ( COMPONENT = 'SAP_APPL' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_APPL 600 SAPKH60037 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_APPL 602 SAPKH60227 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_APPL 603 SAPKH60326 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_APPL 604 SAPKH60426 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_APPL 605 SAPKH60523 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_APPL 606 SAPKH60633 -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_FIN 617 SAPK-61728INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- SAP_FIN 618 SAPK-61822INSAPFIN -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_APPL' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_APPL 600 SAPKH60037 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_APPL 602 SAPKH60227 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_APPL 603 SAPKH60326 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_APPL 604 SAPKH60426 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_APPL 605 SAPKH60523 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_APPL 606 SAPKH60633 -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_FIN 617 SAPK-61728INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- SAP_FIN 618 SAPK-61822INSAPFIN -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.2] Note 0003438234 missing and applicable using Correction Instruction" id="0003438234" operator="check_note:0003438234">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_APPL' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_APPL 600 SAPKH60001 - SAPKH60036  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '602' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_APPL 602 602 - SAPKH60226  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0025' )  
        <!-- SAP_APPL 603 603 - SAPKH60325  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '604' and lpad(SP,4,'0') between '0001' and '0025' )  
        <!-- SAP_APPL 604 SAPKH60401 - SAPKH60425  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '605' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_APPL 605 605 - SAPKH60522  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- SAP_APPL 606 SAPKH60601 - SAPKH60632  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_FIN 617 SAPK-61701INSAPFIN - SAPK-61727INSAPFIN  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- SAP_FIN 618 618 - SAPK-61821INSAPFIN  -->
         or
      ( COMPONENT = 'SAP_FIN' and VERSION = '700' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_FIN 700 700 - ALL_SP  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  FIN-FSCM-CLM-BAM 0003427178 - [CVE-2024-30216] Missing Authorization check in SAP S/4 HANA (Cash Management) (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003427178 exists" id="0003427178" operator="check_note">
      <compliant>NOTE = '0003427178' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003427178 missing and solution with SP available" id="0003427178" operator="check_note:0003427178">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003427178 missing and applicable using Correction Instruction" id="0003427178" operator="check_note:0003427178">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 103 103 - SAPK-10311INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 104 104 - SAPK-10409INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 105 105 - SAPK-10507INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 106 - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  FIN-FSCM-CLM-BAM 0003430173 - [CVE-2024-30217] Missing Authorization check in SAP S/4 HANA (Cash Management) (Version 0005)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003430173 exists" id="0003430173" operator="check_note">
      <compliant>NOTE = '0003430173' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003430173 missing and solution with SP available" id="0003430173" operator="check_note:0003430173">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003430173 missing and applicable using Correction Instruction" id="0003430173" operator="check_note:0003430173">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 106 - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  MM-FIO-PUR-REQ-SSP 0003156972 - [CVE-2023-40306] URL Redirection vulnerability in SAP S/4HANA (Manage Catalog It (Version 0009) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003156972 exists" id="0003156972" operator="check_note">
      <compliant>NOTE = '0003156972' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003156972 missing and solution with SP available" id="0003156972" operator="check_note:0003156972">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 103 SAPK-10309INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 104 SAPK-10407INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 105 SAPK-10505INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 106 SAPK-10602INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 103 SAPK-10309INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 104 SAPK-10407INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 105 SAPK-10505INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 106 SAPK-10602INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003156972 missing and applicable using Correction Instruction" id="0003156972" operator="check_note:0003156972">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 103 103 - SAPK-10308INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 104 104 - SAPK-10406INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 105 105 - SAPK-10504INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 106 106 - SAPK-10601INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5]  PA-FIO-LEA 0003164677 - [CVE-2022-29613] Information Disclosure vulnerability in SAP Employee Self Servi (Version 0016) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] Note 0003164677 exists" id="0003164677" operator="check_note">
      <compliant>NOTE = '0003164677' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003164677 missing and solution with SP available" id="0003164677" operator="check_note:0003164677">
      <compliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- GBX01HR5 605 SAPK-60522INGBX01HR5 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- GBX01HR5 605 SAPK-60522INGBX01HR5 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003164677 missing and applicable using Correction Instruction" id="0003164677" operator="check_note:0003164677">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and lpad(SP,4,'0') between '0007' and '0021' )  
        <!-- GBX01HR5 605 SAPK-60507INGBX01HR5 - SAPK-60521INGBX01HR5  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] FIN-CS-CDC-DC 0003442378  - [CVE-2024-28167] Missing Authorization check in SAP Group Reporting Data Collect
       check note 0003443941 - GRDC form allows input on cells which cannot post data (Version 0003) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] Note 0000003443941 exists" id="0003442378" operator="check_note">
      <compliant>NOTE = '0003443941' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] FIN-CS-CDC-DC - Note 0003442378 missing and solution with SP available; referencing to Snote 3443941" id="0003442378" operator="check_note:0003443941">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] FIN-CS-CDC-DC - Note 0003442378 missing and applicable using Correction Instruction; referencing to Snote 3443941" id="0003442378" operator="check_note:0003443941">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 104 104 - SAPK-10409INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 105 105 - SAPK-10507INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 106 - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] BC-CST-DP 0003359778  - [CVE-2024-30218] Denial of service (DOS) vulnerability in SAP NetWeaver AS ABAP 
      parameter rdisp/traffic_control - kernel delivers the default; you must maintain the parameter -->
  <configstore name="ABAP_INSTANCE_PAHI">
    <checkitem desc="[p3-CVSS 6.5] 3359778 parameter rdisp/traffic_control connection timeout for clients" id="0003359778_p">
      <compliant>NAME = 'rdisp/traffic_control' and CASE  
        WHEN LOCATE(substr_after(VALUE, 'LOGIN_TIME='), ',') &gt; 0 THEN lpad(substr_before(substr_after(VALUE, 'LOGIN_TIME='), ','),4,'0')
        ELSE lpad(substr_after(VALUE, 'LOGIN_TIME='),4,'0') END between '0001' and '1000' </compliant>
      <complianttext/>
      <noncompliant>NAME = 'rdisp/traffic_control' and CASE 
        WHEN LOCATE(substr_after(VALUE, 'LOGIN_TIME='), ',') &gt; 0 THEN lpad(substr_before(substr_after(VALUE, 'LOGIN_TIME='), ','),4,'0')
        ELSE lpad(substr_after(VALUE, 'LOGIN_TIME='),4,'0') END not between '0001' and '1000' </noncompliant>
      <noncomplianttext/>
    </checkitem>
  </configstore>
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 6.5] Kernel version which note 0003359778 recommends" id="0003359778_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1318'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') &gt;= '1318'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel version which note 0003359778 recommends" id="0003359778_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1310'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1310'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel version which note 0003359778 recommends" id="0003359778_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0300'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0300'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel version which note 0003359778 recommends" id="0003359778_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0637'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0637'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel version which note 0003359778 recommends" id="0003359778_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0336'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0336'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '785_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '785_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 0003359778" id="0003359778_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0234'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0234'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 0003359778" id="0003359778_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0075'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0075'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003450286 exists" id="0003450286" operator="check_note">
      <compliant>NOTE = '0003450286' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003450286 missing and solution with SP available" id="0003450286" operator="check_note:0003450286">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 795 SAPK-79507INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 796 SAPK-79601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 795 SAPK-79507INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 796 SAPK-79601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003450286 missing and applicable using Correction Instruction" id="0003450286" operator="check_note:0003450286">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0009' and '0031' )  
        <!-- SAP_BASIS 740 SAPKB74009 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- SAP_BASIS 750 750 - SAPK-75029INSAPBASIS  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- SAP_BASIS 751 751 - SAPK-75117INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 752 752 - SAPK-75213INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 753 753 - SAPK-75311INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 754 754 - SAPK-75409INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 755 755 - SAPK-75507INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 756 756 - SAPK-75605INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 757 757 - SAPK-75703INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5]  BC-SRV-GBT-GOS 0003448445 - [CVE-2024-34687] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Appli (Version 0009)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] Note 0003448445 exists" id="0003448445" operator="check_note">
      <compliant>NOTE = '0003448445' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003448445 missing and solution with SP available" id="0003448445" operator="check_note:0003448445">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 795 SAPK-79508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 796 SAPK-79602INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 795 SAPK-79508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 796 SAPK-79602INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003448445 missing and applicable using Correction Instruction" id="0003448445" operator="check_note:0003448445">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 701 701 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- SAP_BASIS 750 750 - SAPK-75029INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 752 752 - SAPK-75213INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 753 753 - SAPK-75311INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 754 754 - SAPK-75409INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BASIS 755 755 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 756 756 - SAPK-75605INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 757 757 - SAPK-75703INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.6]  BC-SRV-KPR-CMS 0003448171 - [CVE-2024-33006] File upload vulnerability in SAP NetWeaver (Version 0010)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.6] Note 0003448171 exists" id="0003448171" operator="check_note">
      <compliant>NOTE = '0003448171' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.6] Note 0003448171 missing and solution with SP available" id="0003448171" operator="check_note:0003448171">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.2]  EHS-SAF-GLM 0001938764 - [CVE-2024-33009] SQL injection vulnerability in SAP Global Label Management (GLM (Version 0008)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.2] Note 0001938764 exists" id="0001938764" operator="check_note">
      <compliant>NOTE = '0001938764' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.2] Note 0001938764 missing and solution with SP available" id="0001938764" operator="check_note:0001938764">
      <compliant>(
      ( COMPONENT = 'EA-APPL' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- EA-APPL 605 SAPK-60512INEAAPPL -->
          or
      ( COMPONENT = 'EA-APPL' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- EA-APPL 606 SAPK-60611INEAAPPL -->
         or
      ( COMPONENT = 'EA-APPL' and VERSION = '616' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- EA-APPL 616 SAPK-61605INEAAPPL -->
          or
      ( COMPONENT = 'EA-APPL' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- EA-APPL 617 SAPK-61703INEAAPPL -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'EA-APPL' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- EA-APPL 605 SAPK-60512INEAAPPL -->
          or
      ( COMPONENT = 'EA-APPL' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- EA-APPL 606 SAPK-60611INEAAPPL -->
         or
      ( COMPONENT = 'EA-APPL' and VERSION = '616' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- EA-APPL 616 SAPK-61605INEAAPPL -->
          or
      ( COMPONENT = 'EA-APPL' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- EA-APPL 617 SAPK-61703INEAAPPL -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.2] Note 0001938764 missing and applicable using Correction Instruction" id="0001938764" operator="check_note:0001938764">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'EA-APPL' and VERSION = '605' and lpad(SP,4,'0') between '0011' and '0011' )  
        <!-- EA-APPL 605 SAPK-60511INEAAPPL - SAPK-60511INEAAPPL  -->
          or
      ( COMPONENT = 'EA-APPL' and VERSION = '606' and lpad(SP,4,'0') between '0008' and '0010' )  
        <!-- EA-APPL 606 SAPK-60608INEAAPPL - SAPK-60610INEAAPPL  -->
         or
      ( COMPONENT = 'EA-APPL' and VERSION = '616' and lpad(SP,4,'0') between '0003' and '0004' )  
        <!-- EA-APPL 616 SAPK-61603INEAAPPL - SAPK-61604INEAAPPL  -->
          or
      ( COMPONENT = 'EA-APPL' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0002' )  
        <!-- EA-APPL 617 SAPK-61701INEAAPPL - SAPK-61702INEAAPPL  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  FI-FIO-AR-PAY 0003434666 - [Multiple CVEs] Missing Authorization Checks in SAP S/4 HANA (Manage Bank Statem (Version 0009)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003434666 exists" id="0003434666" operator="check_note">
      <compliant>NOTE = '0003434666' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003434666 missing and solution with SP available" id="0003434666" operator="check_note:0003434666">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
         or
      ( COMPONENT = 'SAPSCORE' and VERSION = '131' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAPSCORE 131 SAPK-13108INSAPSCORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
         or
      ( COMPONENT = 'SAPSCORE' and VERSION = '131' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAPSCORE 131 SAPK-13108INSAPSCORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003434666 missing and applicable using Correction Instruction" id="0003434666" operator="check_note:0003434666">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 105 105 - SAPK-10507INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 106 - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.5]  FI-TV-ODT-MTR 0003447467 - [CVE-2024-32731] Missing Authorization check in SAP My Travel Requests (Version 0011)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.5] Note 0003447467 exists" id="0003447467" operator="check_note">
      <compliant>NOTE = '0003447467' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] Note 0003447467 missing and solution with SP available" id="0003447467" operator="check_note:0003447467">
      <compliant>(
      ( COMPONENT = 'SRA004' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SRA004 600 SAPK-60012INSRA004 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SRA004' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SRA004 600 SAPK-60012INSRA004 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] Note 0003447467 missing and applicable using Correction Instruction" id="0003447467" operator="check_note:0003447467">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SRA004' and VERSION = '600' and lpad(SP,4,'0') between '0008' and '0011' )  
        <!-- SRA004 600 SAPK-60008INSRA004 - SAPK-60011INSRA004  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.5]  FIN-FSCM-CLM-BAM 0003392049 - [CVE-2024-33000] Missing Authorization check in SAP Bank Account Management (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] Note 0003392049 exists" id="0003392049" operator="check_note">
      <compliant>NOTE = '0003392049' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] Note 0003392049 missing and solution with SP available" id="0003392049" operator="check_note:0003392049">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] Note 0003392049 missing and applicable using Correction Instruction" id="0003392049" operator="check_note:0003392049">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 101 101 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0002' and '0013' )  
        <!-- S4CORE 102 SAPK-10202INS4CORE - SAPK-10213INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 103 103 - SAPK-10311INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 104 104 - SAPK-10409INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 105 105 - SAPK-10507INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CORE 106 106 - 106  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- S4CORE 106 SAPK-10601INS4CORE - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CORE 108 108 - 108  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  BC-EIM-ESH 0003460772 - [CVE-2024-33002] Cross-Site Scripting (XSS) Vulnerability in SAP S/4HANA (Docume (Version 0010)
       check note 0003449741 - Deactivate obsolete class method (Version 0002) (High) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003449741 exists" id="0003460772" operator="check_note">
      <compliant>NOTE = '0003449741' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003449741 missing and solution with SP available" id="0003460772" operator="check_note:0003449741">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 795 SAPK-79509INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 796 SAPK-79603INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 795 SAPK-79509INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 796 SAPK-79603INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003449741 missing and applicable using Correction Instruction" id="0003460772" operator="check_note:0003449741">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- SAP_BASIS 750 750 - SAPK-75029INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- SAP_BASIS 751 751 - SAPK-75117INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 752 752 - SAPK-75213INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 753 753 - SAPK-75311INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 754 754 - SAPK-75409INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 755 755 - SAPK-75507INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 756 756 - SAPK-75605INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 757 757 - SAPK-75703INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] CA-GTF-DOB - Note 0003459379 exists" id="0003459379" operator="check_note">
      <compliant>NOTE = '0003459379' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] CA-GTF-DOB - Note 0003459379 missing and solution with SP available" id="0003459379" operator="check_note:0003459379">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] CA-GTF-DOB - Note 0003459379 missing and applicable using Correction Instruction" id="0003459379" operator="check_note:0003459379">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 101 101 - ALL_SP  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4FND 102 102 - SAPK-10213INS4FND manual -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4FND 103 103 - SAPK-10311INS4FND manual -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4FND 104 104 - SAPK-10409INS4FND manual -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4FND 105 105 - SAPK-10507INS4FND manual -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 106 106 - SAPK-10605INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 107 107 - SAPK-10703INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4FND 108 108 - SAPK-10801INS4FND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- SAP_BS_FND 702 702 - SAPK-70224INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- SAP_BS_FND 731 SAPK-73101INSAPBSFND - SAPK-73133INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BS_FND 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- SAP_BS_FND 747 747 - SAPK-74728INSAPBSFND manual -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_BS_FND 748 748 - SAPK-74822INSAPBSFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] 0003453170 SV-SMG-SDD - [CVE-2024-33001] Denial of service (DOS) in SAP NetWeaver and ABAP platform (Version 7) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] SV-SMG-SDD - Note 0003453170 exists" id="0003453170" operator="check_note">
      <compliant>NOTE = '0003453170' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] SV-SMG-SDD - Note 0003453170 missing and solution with SP available" id="0003453170" operator="check_note:0003453170">
      <compliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- ST-PI 2008_1_700 SAPK-70037INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- ST-PI 2008_1_710 SAPK-71037INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- ST-PI 740 SAPK-74027INSTPI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- ST-PI 2008_1_700 SAPK-70037INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- ST-PI 2008_1_710 SAPK-71037INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- ST-PI 740 SAPK-74027INSTPI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] SV-SMG-SDD - Note 0003453170 missing and applicable using Correction Instruction" id="0003453170" operator="check_note:0003453170">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and lpad(SP,4,'0') between '0000' and '0036' )  
        <!-- ST-PI 2008_1_700 2008_1_700 - SAPK-70036INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and lpad(SP,4,'0') between '0000' and '0036' )  
        <!-- ST-PI 2008_1_710 SAPKITLREJ - SAPK-71036INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- ST-PI 740 SAPK-74001INSTPI - SAPK-74026INSTPI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] 0003466175 FI-FIO-AR-PAY - [CVE-2024-34691] Missing Authorization check in SAP S/4HANA (Manage Incoming Payment Files) (Version 10) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] FI-FIO-AR-PAY - Note 0003466175 exists" id="0003466175" operator="check_note">
      <compliant>NOTE = '0003466175' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] FI-FIO-AR-PAY - Note 0003466175 missing and solution with SP available" id="0003466175" operator="check_note:0003466175">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] FI-FIO-AR-PAY - Note 0003466175 missing and applicable using Correction Instruction" id="0003466175" operator="check_note:0003466175">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 102 102 - SAPK-10213INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 103 103 - SAPK-10311INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 104 104 - SAPK-10409INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 105 105 - SAPK-10507INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 106 - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] 0003465129 CA-WUI-UI - [CVE-2024-34686] Cross-Site Scripting (XSS) vulnerability in SAP CRM (WebClient UI) (Version 7) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] CA-WUI-UI - Note 0003465129 exists" id="0003465129" operator="check_note">
      <compliant>NOTE = '0003465129' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] CA-WUI-UI - Note 0003465129 missing and solution with SP available" id="0003465129" operator="check_note:0003465129">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- WEBCUIF 700 SAPK-70027INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- WEBCUIF 731 SAPK-73134INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- WEBCUIF 747 SAPK-74729INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- WEBCUIF 748 SAPK-74823INWEBCUIF -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- WEBCUIF 700 SAPK-70027INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- WEBCUIF 731 SAPK-73134INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- WEBCUIF 747 SAPK-74729INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- WEBCUIF 748 SAPK-74823INWEBCUIF -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] CA-WUI-UI - Note 0003465129 missing and applicable using Correction Instruction" id="0003465129" operator="check_note:0003465129">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'HIDDEN' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- HIDDEN 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4FND 102 102 - SAPK-10213INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4FND 103 103 - SAPK-10311INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4FND 104 104 - SAPK-10409INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4FND 105 105 - SAPK-10507INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 106 106 - SAPK-10605INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 107 107 - SAPK-10703INS4FND  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '700' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- WEBCUIF 700 SAPK-70001INWEBCUIF - SAPK-70026INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- WEBCUIF 701 SAPK-70103INWEBCUIF - SAPK-70123INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '730' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 730 730 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- WEBCUIF 731 SAPK-73101INWEBCUIF - SAPK-73133INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- WEBCUIF 747 747 - SAPK-74728INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and lpad(SP,4,'0') between '0010' and '0022' )  
        <!-- WEBCUIF 748 SAPK-74810INWEBCUIF - SAPK-74822INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '800' and lpad(SP,4,'0') between '0006' and '0999' )  
        <!-- WEBCUIF 800 SAPK-80006INWEBCUIF - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '801' and lpad(SP,4,'0') between '0004' and '0999' )  
        <!-- WEBCUIF 801 SAPK-80104INWEBCUIF - ALL_SP  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] 0003450286 BC-MID-AC - [CVE-2024-32733] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 12) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] BC-MID-AC - Note 0003450286 exists" id="0003450286" operator="check_note">
      <compliant>NOTE = '0003450286' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] BC-MID-AC - Note 0003450286 missing and solution with SP available" id="0003450286" operator="check_note:0003450286">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 795 SAPK-79507INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 796 SAPK-79601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_BASIS 751 SAPK-75118INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 752 SAPK-75214INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 753 SAPK-75312INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 795 SAPK-79507INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 796 SAPK-79601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] BC-MID-AC - Note 0003450286 missing and applicable using Correction Instruction" id="0003450286" operator="check_note:0003450286">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0017' and '0031' )  
        <!-- SAP_BASIS 740 SAPKB74017 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0007' and '0029' )  
        <!-- SAP_BASIS 750 SAPK-75007INSAPBASIS - SAPK-75029INSAPBASIS  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0002' and '0017' )  
        <!-- SAP_BASIS 751 SAPK-75102INSAPBASIS - SAPK-75117INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0001' and '0013' )  
        <!-- SAP_BASIS 752 SAPK-75201INSAPBASIS - SAPK-75213INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0001' and '0011' )  
        <!-- SAP_BASIS 753 SAPK-75301INSAPBASIS - SAPK-75311INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 754 754 - SAPK-75409INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 755 755 - SAPK-75507INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 756 756 - SAPK-75605INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 757 757 - SAPK-75703INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.5] 0003465455 BW4-DM-TRFN - [CVE-2024-37176] Missing Authorization check in SAP BW/4HANA Transformation and DTP (Version 11) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.5] BW4-DM-TRFN - Note 0003465455 exists" id="0003465455" operator="check_note">
      <compliant>NOTE = '0003465455' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] BW4-DM-TRFN - Note 0003465455 missing and solution with SP available" id="0003465455" operator="check_note:0003465455">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- DW4CORE 300 SAPK-30009INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- DW4CORE 400 SAPK-40002INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '796' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- DW4CORE 796 SAPK-79603INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BW 750 SAPK-75030INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BW 756 SAPK-75606INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BW 757 SAPK-75704INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- DW4CORE 300 SAPK-30009INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- DW4CORE 400 SAPK-40002INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '796' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- DW4CORE 796 SAPK-79603INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BW 750 SAPK-75030INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BW 756 SAPK-75606INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BW 757 SAPK-75704INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] BW4-DM-TRFN - Note 0003465455 missing and applicable using Correction Instruction" id="0003465455" operator="check_note:0003465455">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- DW4CORE 200 200 - SAPK-20006INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- DW4CORE 300 300 - SAPK-30008INDW4CORE manual -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- DW4CORE 400 400 - SAPK-40001INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0010' and '0031' )  
        <!-- SAP_BW 740 SAPKW74010 - SAPKW74031  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0029' )  
        <!-- SAP_BW 750 SAPK-75004INSAPBW - SAPK-75022INSAPBW  -->
        <!-- SAP_BW 750 SAPK-75023INSAPBW - SAPK-75029INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BW 751 751 - SAPK-75118INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 752 752 - SAPK-75214INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 753 753 - SAPK-75312INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 754 754 - SAPK-75410INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 755 755 - SAPK-75508INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BW 756 756 - SAPK-75605INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BW 757 757 - SAPK-75703INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BW 758 758 - SAPK-75801INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4] 0003457265 IS-HER-CM-AD - [CVE-2024-34690] Missing Authorization check in SAP Student Life Cycle Management (SLcM) (Version 13) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] IS-HER-CM-AD - Note 0003457265 exists" id="0003457265" operator="check_note">
      <compliant>NOTE = '0003457265' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] IS-HER-CM-AD - Note 0003457265 missing and solution with SP available" id="0003457265" operator="check_note:0003457265">
      <compliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
         or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- IS-PS-CA 618 SAPK-61822INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- IS-PS-CA 802 SAPK-80214INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- IS-PS-CA 803 SAPK-80312INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- IS-PS-CA 804 SAPK-80410INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- IS-PS-CA 805 SAPK-80508INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- IS-PS-CA 806 SAPK-80606INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- IS-PS-CA 807 SAPK-80704INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- IS-PS-CA 808 SAPK-80802INISPSCA -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
         or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- IS-PS-CA 618 SAPK-61822INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- IS-PS-CA 802 SAPK-80214INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- IS-PS-CA 803 SAPK-80312INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- IS-PS-CA 804 SAPK-80410INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- IS-PS-CA 805 SAPK-80508INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- IS-PS-CA 806 SAPK-80606INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- IS-PS-CA 807 SAPK-80704INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- IS-PS-CA 808 SAPK-80802INISPSCA -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] IS-HER-CM-AD - Note 0003457265 missing and applicable using Correction Instruction" id="0003457265" operator="check_note:0003457265">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- IS-PS-CA 617 SAPK-61701INISPSCA - SAPK-61728INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- IS-PS-CA 618 618 - SAPK-61821INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- IS-PS-CA 802 802 - SAPK-80213INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- IS-PS-CA 803 803 - SAPK-80311INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- IS-PS-CA 804 804 - SAPK-80409INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- IS-PS-CA 805 805 - SAPK-80507INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- IS-PS-CA 806 806 - SAPK-80605INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- IS-PS-CA 807 807 - SAPK-80703INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- IS-PS-CA 808 808 - SAPK-80801INISPSCA  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.9] 0002638217 FI-CF-INF - Switchable Authorization Checks in Central Finance Infrastructure Components (Version 3) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS ] Note 0002638217 exists" id="0002638217" operator="check_note">
      <compliant>NOTE = '0002638217' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS ] Note 0002638217 missing and solution with SP available" id="0002638217" operator="check_note:0002638217">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 100 SAPK-10007INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 101 SAPK-10105INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 102 SAPK-10203INS4CORE -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '720' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_FIN 720 SAPK-72010INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_FIN 730 SAPK-73012INSAPFIN -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 100 SAPK-10007INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 101 SAPK-10105INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 102 SAPK-10203INS4CORE -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '720' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_FIN 720 SAPK-72010INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_FIN 730 SAPK-73012INSAPFIN -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS ] Note 0002638217 missing and applicable using Correction Instruction" id="0002638217" operator="check_note:0002638217">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 100 100 - SAPK-10006INS4CORE manual -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 101 101 - SAPK-10104INS4CORE manual -->
        <!-- S4CORE 101 SAPK-10103INS4CORE - SAPK-10104INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CORE 102 SAPK-10201INS4CORE - SAPK-10202INS4CORE  -->
        <!-- S4CORE 102 102 - SAPK-10202INS4CORE manual -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '720' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_FIN 720 720 - SAPK-72009INSAPFIN manual -->
        <!-- SAP_FIN 720 SAPK-72005INSAPFIN - SAPK-72009INSAPFIN  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_FIN 730 730 - SAPK-73011INSAPFIN manual -->
        <!-- SAP_FIN 730 SAPK-73005INSAPFIN - SAPK-73011INSAPFIN  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.5] 0003392049 FIN-FSCM-CLM-BAM - [CVE-2024-33000] Missing Authorization check in SAP Bank Account Management (Version 8) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] FIN-FSCM-CLM-BAM - Note 0003392049 exists" id="0003392049" operator="check_note">
      <compliant>NOTE = '0003392049' and UPPER(PRSTATUS) = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] FIN-FSCM-CLM-BAM - Note 0003392049 missing and solution with SP available" id="0003392049" operator="check_note:0003392049">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] FIN-FSCM-CLM-BAM - Note 0003392049 missing and applicable using Correction Instruction" id="0003392049" operator="check_note:0003392049">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 101 101 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0002' and '0013' )  
        <!-- S4CORE 102 SAPK-10202INS4CORE - SAPK-10213INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 103 103 - SAPK-10311INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 104 104 - SAPK-10409INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 105 105 - SAPK-10507INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 106 - 106  -->
        <!-- S4CORE 106 SAPK-10601INS4CORE - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') = '0000' )  
        <!-- S4CORE 108 108 - 108  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] Note 0003458789 exists" id="0003458789" operator="check_note">
      <compliant>NOTE = '0003458789' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003458789 missing and solution with SP available" id="0003458789" operator="check_note:0003458789">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003458789 missing and applicable using Correction Instruction" id="0003458789" operator="check_note:0003458789">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 701 701 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BASIS 750 750 - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.0]  BC-BMT-WFM 0003483993 - [CVE-2024-34689] Prerequisite for Security Note 3458789 (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] Note 0003483993 exists" id="0003483993" operator="check_note">
      <compliant>NOTE = '0003483993' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003483993 missing and solution with SP available" id="0003483993" operator="check_note:0003483993">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003483993 missing and applicable using Correction Instruction" id="0003483993" operator="check_note:0003483993">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 701 701 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BASIS 750 750 - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.7]  BC-MID-ICF 0003456952 - [CVE-2024-39599] Protection Mechanism Failure in SAP NetWeaver Application Serve (Version 0009)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.7] Note 0003456952 exists" id="0003456952" operator="check_note">
      <compliant>NOTE = '0003456952' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.7] Note 0003456952 missing and solution with SP available" id="0003456952" operator="check_note:0003456952">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 795 SAPK-79509INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 796 SAPK-79603INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 750 SAPK-75030INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 754 SAPK-75410INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 755 SAPK-75508INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 756 SAPK-75606INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 757 SAPK-75704INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '795' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 795 SAPK-79509INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '796' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 796 SAPK-79603INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.7] Note 0003456952 missing and applicable using Correction Instruction" id="0003456952" operator="check_note:0003456952">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0028' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70028 - SAPKB70041  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0013' and '0026' )  
        <!-- SAP_BASIS 701 SAPKB70113 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0013' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70213 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0005' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73105 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0004' and '0031' )  
        <!-- SAP_BASIS 740 SAPKB74004 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- SAP_BASIS 750 750 - SAPK-75029INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 754 754 - SAPK-75409INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 755 755 - SAPK-75507INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 756 756 - SAPK-75605INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 757 757 - SAPK-75703INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.1]  BC-SRV-DX-DXW 0003454858 - [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Applicati (Version 0003)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 exists" id="0003454858" operator="check_note">
      <compliant>NOTE = '0003454858' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 missing and solution with SP available" id="0003454858" operator="check_note:0003454858">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 missing and applicable using Correction Instruction" id="0003454858" operator="check_note:0003454858">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0015' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70015 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 701 701 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- SAP_BASIS 750 750 - SAPK-75029INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  BW-PLA-BPS 0003482217 - [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Busi (Version 0012)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003482217 exists" id="0003482217" operator="check_note">
      <compliant>NOTE = '0003482217' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003482217 missing and solution with SP available" id="0003482217" operator="check_note:0003482217">
      <compliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0044' )   ) 
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BW 701 SAPKW70127 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BW 702 SAPKW70227 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BW 731 SAPKW73135 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0044' )  
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BW 701 SAPKW70127 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BW 702 SAPKW70227 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BW 731 SAPKW73135 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003482217 missing and applicable using Correction Instruction" id="0003482217" operator="check_note:0003482217">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0043' )  
        <!-- SAP_BW 700 SAPKW70004 - SAPKW70043  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BW 701 701 - SAPKW70126  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BW 702 SAPKW70201 - SAPKW70226  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '730' and lpad(SP,4,'0') between '0001' and '0021' )  
        <!-- SAP_BW 730 SAPKW73001 - SAPKW73021  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73134  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BW 740 740 - SAPKW74031  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BW 750 750 - SAPK-75030INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BW 751 751 - SAPK-75118INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 752 752 - SAPK-75214INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 753 753 - SAPK-75312INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 754 754 - SAPK-75410INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 755 755 - SAPK-75508INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 756 756 - SAPK-75606INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 757 757 - SAPK-75704INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BW 758 758 - SAPK-75801INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] CA-GTF-DOB 0003459379 - [CVE-2024-34683] Unrestricted file upload in SAP Document Builder (HTTP service) (Version 0010) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] Note 0003459379 exists" id="0003459379" operator="check_note">
      <compliant>NOTE = '0003459379' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003459379 missing and solution with SP available" id="0003459379" operator="check_note:0003459379">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003459379 missing and applicable using Correction Instruction" id="0003459379" operator="check_note:0003459379">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 101 101 - ALL_SP  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0009' and '0013' )  
        <!-- S4FND 102 SAPK-10209INS4FND - SAPK-10213INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0007' and '0011' )  
        <!-- S4FND 103 SAPK-10307INS4FND - SAPK-10311INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0005' and '0009' )  
        <!-- S4FND 104 SAPK-10405INS4FND - SAPK-10409INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0003' and '0007' )  
        <!-- S4FND 105 SAPK-10503INS4FND - SAPK-10507INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 106 106 - SAPK-10605INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 107 107 - SAPK-10703INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4FND 108 108 - SAPK-10801INS4FND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- SAP_BS_FND 702 702 - SAPK-70224INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- SAP_BS_FND 731 SAPK-73101INSAPBSFND - SAPK-73133INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BS_FND 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and lpad(SP,4,'0') between '0004' and '0028' )  
        <!-- SAP_BS_FND 747 SAPK-74704INSAPBSFND - SAPK-74728INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_BS_FND 748 748 - SAPK-74822INSAPBSFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.1]  CA-WUI-UI 0003101986 - Prepare CSP support for On-Premise down port for code dependency in SAP CRM WebC (Version 0004) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.1] Note 0003101986 exists" id="0003101986" operator="check_note">
      <compliant>NOTE = '0003101986' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003101986 missing and solution with SP available" id="0003101986" operator="check_note:0003101986">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 104 SAPK-10406INS4FND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 104 SAPK-10406INS4FND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003101986 missing and applicable using Correction Instruction" id="0003101986" operator="check_note:0003101986">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0004' and '0005' )  
        <!-- S4FND 104 SAPK-10404INS4FND - SAPK-10405INS4FND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  CA-WUI-UI 0003467377 - [Multiple CVEs] Multiple vulnerabilities in SAP CRM (WebClient UI) (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003467377 exists" id="0003467377" operator="check_note">
      <compliant>NOTE = '0003467377' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003467377 missing and solution with SP available" id="0003467377" operator="check_note:0003467377">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4FND 102 SAPK-10215INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4FND 103 SAPK-10313INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4FND 104 SAPK-10411INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4FND 105 SAPK-10509INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- WEBCUIF 731 SAPK-73134INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- WEBCUIF 747 SAPK-74729INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- WEBCUIF 748 SAPK-74823INWEBCUIF -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4FND 102 SAPK-10215INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4FND 103 SAPK-10313INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4FND 104 SAPK-10411INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4FND 105 SAPK-10509INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- WEBCUIF 731 SAPK-73134INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- WEBCUIF 747 SAPK-74729INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- WEBCUIF 748 SAPK-74823INWEBCUIF -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003467377 missing and applicable using Correction Instruction" id="0003467377" operator="check_note:0003467377">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4FND 102 102 - SAPK-10214INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4FND 103 103 - SAPK-10312INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4FND 104 104 - SAPK-10410INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4FND 105 105 - SAPK-10508INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 106 106 - SAPK-10605INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 107 107 - SAPK-10703INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4FND 108 108 - SAPK-10801INS4FND  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- WEBCUIF 701 SAPK-70103INWEBCUIF - SAPK-70123INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and lpad(SP,4,'0') between '0003' and '0033' )  
        <!-- WEBCUIF 731 SAPK-73103INWEBCUIF - SAPK-73133INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and lpad(SP,4,'0') between '0003' and '0028' )  
        <!-- WEBCUIF 747 SAPK-74703INWEBCUIF - SAPK-74728INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and lpad(SP,4,'0') between '0002' and '0022' )  
        <!-- WEBCUIF 748 SAPK-74802INWEBCUIF - SAPK-74822INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '800' and lpad(SP,4,'0') between '0002' and '0999' )  
        <!-- WEBCUIF 800 SAPK-80002INWEBCUIF - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '801' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 801 801 - ALL_SP  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7]  FIN-BA 0003483344 - [CVE-2024-39592] Missing Authorization check in SAP PDCE (Version 0007)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 exists" id="0003483344" operator="check_note">
      <compliant>NOTE = '0003483344' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 missing and solution with SP available" id="0003483344" operator="check_note:0003483344">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
         or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
         or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 missing and applicable using Correction Instruction" id="0003483344" operator="check_note:0003483344">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 102 102 - SAPK-10214INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 103 103 - SAPK-10312INS4CORE  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4COREOP 104 104 - SAPK-10410INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4COREOP 105 105 - SAPK-10508INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4COREOP 106 106 - SAPK-10606INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4COREOP 107 107 - SAPK-10704INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4COREOP 108 108 - SAPK-10801INS4COREOP  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4]  FIN-FSCM-PF-IHB 0003457354 - [CVE-2024-37172] Missing Authorization check in SAP S/4HANA Finance (Advanced Pa (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] Note 0003457354 exists" id="0003457354" operator="check_note">
      <compliant>NOTE = '0003457354' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] Note 0003457354 missing and solution with SP available" id="0003457354" operator="check_note:0003457354">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] Note 0003457354 missing and applicable using Correction Instruction" id="0003457354" operator="check_note:0003457354">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.0]  TM-CP 0003469958 - [CVE-2024-37171] Server-Side Request Forgery (SSRF) in SAP Transportation Manage (Version 0009)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] Note 0003469958 exists" id="0003469958" operator="check_note">
      <compliant>NOTE = '0003469958' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003469958 missing and solution with SP available" id="0003469958" operator="check_note:0003469958">
      <compliant>(
      ( COMPONENT = 'SAPTMUI' and VERSION = '140' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAPTMUI 140 SAPK-14017INSAPTMUI -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '150' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAPTMUI 150 SAPK-15019INSAPTMUI -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '160' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAPTMUI 160 SAPK-16015INSAPTMUI -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '170' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAPTMUI 170 SAPK-17012INSAPTMUI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAPTMUI' and VERSION = '140' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAPTMUI 140 SAPK-14017INSAPTMUI -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '150' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAPTMUI 150 SAPK-15019INSAPTMUI -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '160' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAPTMUI 160 SAPK-16015INSAPTMUI -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '170' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAPTMUI 170 SAPK-17012INSAPTMUI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003469958 missing and applicable using Correction Instruction" id="0003469958" operator="check_note:0003469958">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAPTMUI' and VERSION = '140' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAPTMUI 140 140 - SAPK-14016INSAPTMUI  -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '150' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAPTMUI 150 150 - SAPK-15018INSAPTMUI  -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '160' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAPTMUI 160 160 - SAPK-16014INSAPTMUI  -->
          or
      ( COMPONENT = 'SAPTMUI' and VERSION = '170' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAPTMUI 170 170 - SAPK-17011INSAPTMUI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] Note 0003458789 exists" id="0003458789" operator="check_note">
      <compliant>NOTE = '0003458789' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003458789 missing and solution with SP available" id="0003458789" operator="check_note:0003458789">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003458789 missing and applicable using Correction Instruction" id="0003458789" operator="check_note:0003458789">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 701 701 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 740 740 - SAPKB74008  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0009' and '0031' )  
        <!-- SAP_BASIS 740 SAPKB74009 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BASIS 750 750 - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.7]  BC-FES-BUS-RUN 0003468102 - [CVE-2024-41732] Improper Access Control in SAP Netweaver Application Server ABA (Version 0010) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.7] Note 0003468102 exists" id="0003468102" operator="check_note">
      <compliant>NOTE = '0003468102' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.7] Note 0003468102 missing and solution with SP available" id="0003468102" operator="check_note:0003468102">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 912 SAPK-91201INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_UI 754 SAPK-75416INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_UI 755 SAPK-75513INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_UI 756 SAPK-75610INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_UI 757 SAPK-75707INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_UI 758 SAPK-75802INSAPUI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 912 SAPK-91201INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_UI 754 SAPK-75416INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_UI 755 SAPK-75513INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_UI 756 SAPK-75610INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_UI 757 SAPK-75707INSAPUI -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_UI 758 SAPK-75802INSAPUI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.7] Note 0003468102 missing and applicable using Correction Instruction" id="0003468102" operator="check_note:0003468102">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0036' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70036 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0021' and '0026' )  
        <!-- SAP_BASIS 701 SAPKB70121 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0021' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70221 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0023' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73123 - SAPKB73134  -->
         or
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0015' )  
        <!-- SAP_UI 754 SAPK-75401INSAPUI - SAPK-75415INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and lpad(SP,4,'0') between '0001' and '0012' )  
        <!-- SAP_UI 755 SAPK-75501INSAPUI - SAPK-75512INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0009' )  
        <!-- SAP_UI 756 SAPK-75601INSAPUI - SAPK-75609INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0006' )  
        <!-- SAP_UI 757 SAPK-75701INSAPUI - SAPK-75706INSAPUI  -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '758' and lpad(SP,4,'0') between '0001' and '0001' )  
        <!-- SAP_UI 758 SAPK-75801INSAPUI - SAPK-75801INSAPUI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.1]  BC-SRV-DX-DXW 0003454858 - [CVE-2024-37180] Information Disclosure vulnerability in SAP NetWeaver Applicati (Version 0005) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 exists" id="0003454858" operator="check_note">
      <compliant>NOTE = '0003454858' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 missing and solution with SP available" id="0003454858" operator="check_note:0003454858">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 missing and applicable using Correction Instruction" id="0003454858" operator="check_note:0003454858">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0015' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70015 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 701 701 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BASIS 750 750 - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  BC-SRV-LIM 0003494349 - [CVE-2024-41734] Missing Authorization check in SAP NetWeaver Application Server (Version 0005) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003494349 exists" id="0003494349" operator="check_note">
      <compliant>NOTE = '0003494349' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003494349 missing and solution with SP available" id="0003494349" operator="check_note:0003494349">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 912 SAPK-91203INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 912 SAPK-91203INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003494349 missing and applicable using Correction Instruction" id="0003494349" operator="check_note:0003494349">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0038' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70038 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0023' and '0026' )  
        <!-- SAP_BASIS 701 SAPKB70123 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0023' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70223 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0032' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73132 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0028' and '0031' )  
        <!-- SAP_BASIS 740 SAPKB74028 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0027' and '0030' )  
        <!-- SAP_BASIS 750 SAPK-75027INSAPBASIS - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0015' and '0018' )  
        <!-- SAP_BASIS 751 SAPK-75115INSAPBASIS - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0011' and '0014' )  
        <!-- SAP_BASIS 752 SAPK-75211INSAPBASIS - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0009' and '0012' )  
        <!-- SAP_BASIS 753 SAPK-75309INSAPBASIS - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0007' and '0010' )  
        <!-- SAP_BASIS 754 SAPK-75407INSAPBASIS - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BASIS 758 758 - SAPK-75802INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  BW-PLA-BPS 0003482217 - [CVE-2024-39594] Multiple Cross-Site Scripting (XSS) vulnerabilities in SAP Busi (Version 0014) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003482217 exists" id="0003482217" operator="check_note">
      <compliant>NOTE = '0003482217' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003482217 missing and solution with SP available" id="0003482217" operator="check_note:0003482217">
      <compliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0044' )   ) 
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BW 701 SAPKW70127 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BW 702 SAPKW70227 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BW 731 SAPKW73135 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0044' )  
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BW 701 SAPKW70127 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BW 702 SAPKW70227 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BW 731 SAPKW73135 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003482217 missing and applicable using Correction Instruction" id="0003482217" operator="check_note:0003482217">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0043' )  
        <!-- SAP_BW 700 SAPKW70004 - SAPKW70043  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BW 701 701 - SAPKW70126  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BW 702 SAPKW70201 - SAPKW70226  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '730' and lpad(SP,4,'0') between '0001' and '0021' )  
        <!-- SAP_BW 730 SAPKW73001 - SAPKW73021  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73134  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BW 740 740 - SAPKW74031  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BW 750 750 - SAPK-75030INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BW 751 751 - SAPK-75118INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 752 752 - SAPK-75214INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 753 753 - SAPK-75312INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 754 754 - SAPK-75410INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 755 755 - SAPK-75508INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 756 756 - SAPK-75606INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 757 757 - SAPK-75704INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BW 758 758 - SAPK-75801INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.5]  BW4-DM-TRFN 0003465455 - [CVE-2024-37176] Missing Authorization check in SAP BW/4HANA Transformation and (Version 0013) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.5] Note 0003465455 exists" id="0003465455" operator="check_note">
      <compliant>NOTE = '0003465455' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] Note 0003465455 missing and solution with SP available" id="0003465455" operator="check_note:0003465455">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- DW4CORE 300 SAPK-30009INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- DW4CORE 400 SAPK-40002INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '796' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- DW4CORE 796 SAPK-79603INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BW 750 SAPK-75030INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BW 756 SAPK-75606INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BW 757 SAPK-75704INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- DW4CORE 300 SAPK-30009INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- DW4CORE 400 SAPK-40002INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '796' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- DW4CORE 796 SAPK-79603INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BW 750 SAPK-75030INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BW 756 SAPK-75606INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BW 757 SAPK-75704INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BW 758 SAPK-75802INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] Note 0003465455 missing and applicable using Correction Instruction" id="0003465455" operator="check_note:0003465455">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- DW4CORE 200 SAPK-20007INDW4CORE - SAPK-20016INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- DW4CORE 300 SAPK-30004INDW4CORE - SAPK-30008INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- DW4CORE 400 400 - SAPK-40001INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0010' and '0031' )  
        <!-- SAP_BW 740 SAPKW74010 - SAPKW74031  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0029' )  
        <!-- SAP_BW 750 SAPK-75023INSAPBW - SAPK-75029INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BW 751 751 - SAPK-75118INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 752 752 - SAPK-75214INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 753 753 - SAPK-75312INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 754 754 - SAPK-75410INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 755 755 - SAPK-75508INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BW 756 756 - SAPK-75605INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BW 757 757 - SAPK-75703INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BW 758 758 - SAPK-75801INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.8]  CA-ATP-SUP-2CL 0003423268 - [CVE-2023-30533] Prototype Pollution in SAP S/4 HANA (Manage Supply Protection) (Version 0004) (High) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.8] Note 0003423268 exists" id="0003423268" operator="check_note">
      <compliant>NOTE = '0003423268' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.8] Note 0003423268 missing and solution with SP available" id="0003423268" operator="check_note:0003423268">
      <compliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- UIS4HOP1 800 SAPK-80004INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- UIS4HOP1 800 SAPK-80004INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.8] Note 0003423268 missing and applicable using Correction Instruction" id="0003423268" operator="check_note:0003423268">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- UIS4HOP1 800 800 - SAPK-80003INUIS4HOP1  -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- UIS4HOP1 900 900 - SAPK-90001INUIS4HOP1  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5]  CA-EPT-SSC 0003474590 - [CVE-2024-42376] Multiple Missing Authorization Check vulnerabilities in SAP Sha (Version 0010) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] Note 0003474590 exists" id="0003474590" operator="check_note">
      <compliant>NOTE = '0003474590' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003474590 missing and solution with SP available" id="0003474590" operator="check_note:0003474590">
      <compliant>(
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003474590 missing and applicable using Correction Instruction" id="0003474590" operator="check_note:0003474590">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- SAP_BS_FND 702 702 - SAPK-70224INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- SAP_BS_FND 731 SAPK-73101INSAPBSFND - SAPK-73133INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BS_FND 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- SAP_BS_FND 747 747 - SAPK-74728INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_BS_FND 748 748 - SAPK-74822INSAPBSFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5]  CA-GTF-DOB 0003459379 - [CVE-2024-34683] Unrestricted file upload in SAP Document Builder (HTTP service) (Version 0012) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] Note 0003459379 exists" id="0003459379" operator="check_note">
      <compliant>NOTE = '0003459379' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003459379 missing and solution with SP available" id="0003459379" operator="check_note:0003459379">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4FND 102 SAPK-10214INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4FND 103 SAPK-10312INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4FND 104 SAPK-10410INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4FND 105 SAPK-10508INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 106 SAPK-10606INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 107 SAPK-10704INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003459379 missing and applicable using Correction Instruction" id="0003459379" operator="check_note:0003459379">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 101 101 - ALL_SP  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0009' and '0013' )  
        <!-- S4FND 102 SAPK-10209INS4FND - SAPK-10213INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0007' and '0011' )  
        <!-- S4FND 103 SAPK-10307INS4FND - SAPK-10311INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0005' and '0009' )  
        <!-- S4FND 104 SAPK-10405INS4FND - SAPK-10409INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0003' and '0007' )  
        <!-- S4FND 105 SAPK-10503INS4FND - SAPK-10507INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 106 106 - SAPK-10605INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 107 107 - SAPK-10703INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4FND 108 108 - SAPK-10801INS4FND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- SAP_BS_FND 702 702 - SAPK-70224INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- SAP_BS_FND 731 SAPK-73101INSAPBSFND - SAPK-73133INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BS_FND 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and lpad(SP,4,'0') between '0004' and '0028' )  
        <!-- SAP_BS_FND 747 SAPK-74704INSAPBSFND - SAPK-74728INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_BS_FND 748 748 - SAPK-74822INSAPBSFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  CA-GTF-DOB 0003477423 - [CVE-2024-39591] Missing Authorization check in SAP Document Builder (Version 0006) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003477423 exists" id="0003477423" operator="check_note">
      <compliant>NOTE = '0003477423' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003477423 missing and solution with SP available" id="0003477423" operator="check_note:0003477423">
      <compliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4FND 102 SAPK-10215INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4FND 103 SAPK-10313INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4FND 104 SAPK-10411INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4FND 105 SAPK-10509INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4FND 106 SAPK-10607INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4FND 107 SAPK-10705INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4FND 102 SAPK-10215INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4FND 103 SAPK-10313INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4FND 104 SAPK-10411INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4FND 105 SAPK-10509INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4FND 106 SAPK-10607INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4FND 107 SAPK-10705INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4FND 108 SAPK-10802INS4FND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SAP_BS_FND 702 SAPK-70225INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BS_FND 731 SAPK-73134INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_BS_FND 747 SAPK-74729INSAPBSFND -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_BS_FND 748 SAPK-74823INSAPBSFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003477423 missing and applicable using Correction Instruction" id="0003477423" operator="check_note:0003477423">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4FND 102 102 - SAPK-10214INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4FND 103 103 - SAPK-10312INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4FND 104 104 - SAPK-10410INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4FND 105 105 - SAPK-10508INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4FND 106 106 - SAPK-10606INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4FND 107 107 - SAPK-10704INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4FND 108 108 - SAPK-10801INS4FND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- SAP_BS_FND 702 702 - SAPK-70224INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- SAP_BS_FND 731 SAPK-73101INSAPBSFND - SAPK-73133INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BS_FND 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- SAP_BS_FND 747 747 - SAPK-74728INSAPBSFND  -->
          or
      ( COMPONENT = 'SAP_BS_FND' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_BS_FND 748 748 - SAPK-74822INSAPBSFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.0]  CRM-MKT 0003487537 - [CVE-2024-41737] Server-Side Request Forgery (SSRF) in SAP CRM ABAP (Insights Ma (Version 0008) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] Note 0003487537 exists" id="0003487537" operator="check_note">
      <compliant>NOTE = '0003487537' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003487537 missing and solution with SP available" id="0003487537" operator="check_note:0003487537">
      <compliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- BBPCRM 700 SAPKU70027 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- BBPCRM 701 SAPKU70124 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- BBPCRM 702 SAPKU70230 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- BBPCRM 714 SAPK-71423INBBPCRM -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- BBPCRM 700 SAPKU70027 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- BBPCRM 701 SAPKU70124 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- BBPCRM 702 SAPKU70230 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- BBPCRM 714 SAPK-71423INBBPCRM -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] Note 0003487537 missing and applicable using Correction Instruction" id="0003487537" operator="check_note:0003487537">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '700' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- BBPCRM 700 SAPKU70001 - SAPKU70026  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- BBPCRM 701 SAPKU70103 - SAPKU70123  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- BBPCRM 702 SAPKU70201 - SAPKU70229  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '712' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- BBPCRM 712 712 - ALL_SP  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- BBPCRM 713 SAPKU71301 - SAPKU71324  -->
         or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0022' )  
        <!-- BBPCRM 714 SAPK-71401INBBPCRM - SAPK-71422INBBPCRM  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.5]  FIN-FSCM-CLM-BAM 0003150704 - [CVE-2023-0023] Information Disclosure in SAP Bank Account Management (Manage Ba (Version 0009) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.5] Note 0003150704 exists" id="0003150704" operator="check_note">
      <compliant>NOTE = '0003150704' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.5] Note 0003150704 missing and solution with SP available" id="0003150704" operator="check_note:0003150704">
      <compliant>(
      ( COMPONENT = 'UIAPFI70' and VERSION = '900' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- UIAPFI70 900 SAPK-90002INUIAPFI70 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'UIAPFI70' and VERSION = '900' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- UIAPFI70 900 SAPK-90002INUIAPFI70 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.5] Note 0003150704 missing and applicable using Correction Instruction" id="0003150704" operator="check_note:0003150704">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'UIAPFI70' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- UIAPFI70 800 800 - SAPK-80003INUIAPFI70  -->
         or
      ( COMPONENT = 'UIAPFI70' and VERSION = '900' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- UIAPFI70 900 900 - SAPK-90001INUIAPFI70  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  IS-HER-CM-AD 0003479293 - [CVE-2024-42373] Missing Authorization Check in SAP Student Life Cycle Managemen (Version 0008) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003479293 exists" id="0003479293" operator="check_note">
      <compliant>NOTE = '0003479293' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003479293 missing and solution with SP available" id="0003479293" operator="check_note:0003479293">
      <compliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- IS-PS-CA 618 SAPK-61823INISPSCA -->
         or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- IS-PS-CA 802 SAPK-80214INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- IS-PS-CA 803 SAPK-80312INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- IS-PS-CA 804 SAPK-80410INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- IS-PS-CA 805 SAPK-80508INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- IS-PS-CA 806 SAPK-80606INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- IS-PS-CA 807 SAPK-80704INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- IS-PS-CA 808 SAPK-80802INISPSCA -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- IS-PS-CA 618 SAPK-61823INISPSCA -->
         or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- IS-PS-CA 802 SAPK-80214INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- IS-PS-CA 803 SAPK-80312INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- IS-PS-CA 804 SAPK-80410INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- IS-PS-CA 805 SAPK-80508INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- IS-PS-CA 806 SAPK-80606INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- IS-PS-CA 807 SAPK-80704INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- IS-PS-CA 808 SAPK-80802INISPSCA -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003479293 missing and applicable using Correction Instruction" id="0003479293" operator="check_note:0003479293">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- IS-PS-CA 617 SAPK-61701INISPSCA - SAPK-61728INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- IS-PS-CA 618 618 - SAPK-61822INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- IS-PS-CA 802 802 - SAPK-80213INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- IS-PS-CA 803 803 - SAPK-80311INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- IS-PS-CA 804 804 - SAPK-80409INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- IS-PS-CA 805 805 - SAPK-80507INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- IS-PS-CA 806 806 - SAPK-80605INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- IS-PS-CA 807 807 - SAPK-80703INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- IS-PS-CA 808 808 - SAPK-80801INISPSCA  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  PM-FIO-WCM 0003475427 - [CVE-2024-41736] Information Disclosure vulnerability in SAP Permit to Work (Version 0008) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003475427 exists" id="0003475427" operator="check_note">
      <compliant>NOTE = '0003475427' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003475427 missing and solution with SP available" id="0003475427" operator="check_note:0003475427">
      <compliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- UIS4HOP1 800 SAPK-80004INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- UIS4HOP1 800 SAPK-80004INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003475427 missing and applicable using Correction Instruction" id="0003475427" operator="check_note:0003475427">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and lpad(SP,4,'0') between '0002' and '0003' )  
        <!-- UIS4HOP1 800 SAPK-80002INUIS4HOP1 - SAPK-80003INUIS4HOP1  -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- UIS4HOP1 900 SAPK-90001INUIS4HOP1 - SAPK-90001INUIS4HOP1  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 2.0] Note 0003507252 exists" id="0003507252" operator="check_note">
      <compliant>NOTE = '0003507252' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.0] Note 0003507252 missing and solution with SP available" id="0003507252" operator="check_note:0003507252">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 912 SAPK-91204INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 912 SAPK-91204INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.0] Note 0003507252 missing and applicable using Correction Instruction" id="0003507252" operator="check_note:0003507252">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0008' and '0032' )  
        <!-- SAP_BASIS 740 SAPKB74008 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BASIS 750 750 - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BASIS 758 758 - SAPK-75802INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4]  BC-DWB-SEM 0003488039 - [Multiple CVEs] Multiple vulnerabilities in SAP NetWeaver Application Server for (Version 0011) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] Note 0003488039 exists" id="0003488039" operator="check_note">
      <compliant>NOTE = '0003488039' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] Note 0003488039 missing and solution with SP available" id="0003488039" operator="check_note:0003488039">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 912 SAPK-91203INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 912 SAPK-91203INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] Note 0003488039 missing and applicable using Correction Instruction" id="0003488039" operator="check_note:0003488039">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0038' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70038 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0023' and '0026' )  
        <!-- SAP_BASIS 701 SAPKB70123 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0023' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70223 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0032' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73132 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0028' and '0031' )  
        <!-- SAP_BASIS 740 SAPKB74028 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0027' and '0030' )  
        <!-- SAP_BASIS 750 SAPK-75027INSAPBASIS - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0015' and '0018' )  
        <!-- SAP_BASIS 751 SAPK-75115INSAPBASIS - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0011' and '0014' )  
        <!-- SAP_BASIS 752 SAPK-75211INSAPBASIS - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0009' and '0012' )  
        <!-- SAP_BASIS 753 SAPK-75309INSAPBASIS - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0007' and '0010' )  
        <!-- SAP_BASIS 754 SAPK-75407INSAPBASIS - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0005' and '0008' )  
        <!-- SAP_BASIS 755 SAPK-75505INSAPBASIS - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0003' and '0006' )  
        <!-- SAP_BASIS 756 SAPK-75603INSAPBASIS - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0004' )  
        <!-- SAP_BASIS 757 SAPK-75701INSAPBASIS - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BASIS 758 758 - SAPK-75802INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 2.7]  BC-DWB-TOO-ABA 0003496410 - [CVE-2024-41728] Missing Authorization check in SAP NetWeaver Application Server (Version 0003) (Low) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 2.7] Note 0003496410 exists" id="0003496410" operator="check_note">
      <compliant>NOTE = '0003496410' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] Note 0003496410 missing and solution with SP available" id="0003496410" operator="check_note:0003496410">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 912 SAPK-91203INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 758 SAPK-75803INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 912 SAPK-91203INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] Note 0003496410 missing and applicable using Correction Instruction" id="0003496410" operator="check_note:0003496410">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0025' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70025 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0010' and '0026' )  
        <!-- SAP_BASIS 701 SAPKB70110 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0009' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70209 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BASIS 750 750 - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BASIS 758 758 - SAPK-75802INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  BW-BEX-ET-WB-7X 0003481588 - [CVE-2024-41729] Information Disclosure vulnerability in the SAP NetWeaver BW (B (Version 0007) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481588 exists" id="0003481588" operator="check_note">
      <compliant>NOTE = '0003481588' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481588 missing and solution with SP available" id="0003481588" operator="check_note:0003481588">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- DW4CORE 300 SAPK-30010INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- DW4CORE 400 SAPK-40003INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0044' )   ) 
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BW 731 SAPKW73136 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BW 758 SAPK-75803INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- DW4CORE 300 SAPK-30010INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- DW4CORE 400 SAPK-40003INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0044' )  
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BW 731 SAPKW73136 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BW 758 SAPK-75803INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481588 missing and applicable using Correction Instruction" id="0003481588" operator="check_note:0003481588">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- DW4CORE 200 SAPK-20007INDW4CORE - SAPK-20016INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- DW4CORE 300 SAPK-30004INDW4CORE - SAPK-30009INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- DW4CORE 400 400 - SAPK-40002INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0020' and '0043' )  
        <!-- SAP_BW 700 SAPKW70020 - SAPKW70043  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0010' and '0026' )  
        <!-- SAP_BW 701 SAPKW70110 - SAPKW70126  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0009' and '0026' )  
        <!-- SAP_BW 702 SAPKW70209 - SAPKW70226  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73135  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BW 740 740 - SAPKW74031  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BW 750 750 - SAPK-75030INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BW 751 751 - SAPK-75118INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 752 752 - SAPK-75214INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 753 753 - SAPK-75312INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 754 754 - SAPK-75410INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 755 755 - SAPK-75508INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 756 756 - SAPK-75606INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 757 757 - SAPK-75704INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BW 758 758 - SAPK-75802INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  BW-BEX-ET-WB-7X 0003481992 - [CVE-2024-44113] Information Disclosure vulnerability in the SAP Business Wareho (Version 0006) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481992 exists" id="0003481992" operator="check_note">
      <compliant>NOTE = '0003481992' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481992 missing and solution with SP available" id="0003481992" operator="check_note:0003481992">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- DW4CORE 300 SAPK-30010INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- DW4CORE 400 SAPK-40003INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0044' )   ) 
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BW 731 SAPKW73136 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BW 740 SAPKW74033 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BW 758 SAPK-75803INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- DW4CORE 300 SAPK-30010INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- DW4CORE 400 SAPK-40003INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0044' )  
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BW 731 SAPKW73136 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BW 740 SAPKW74033 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BW 758 SAPK-75803INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481992 missing and applicable using Correction Instruction" id="0003481992" operator="check_note:0003481992">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- DW4CORE 200 SAPK-20007INDW4CORE - SAPK-20016INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- DW4CORE 300 SAPK-30004INDW4CORE - SAPK-30009INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- DW4CORE 400 400 - SAPK-40002INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0043' )  
        <!-- SAP_BW 700 SAPKW70004 - SAPKW70043  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BW 701 701 - SAPKW70126  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BW 702 SAPKW70201 - SAPKW70226  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73135  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BW 740 740 - SAPKW74031  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BW 750 SAPK-75023INSAPBW - SAPK-75030INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BW 751 751 - SAPK-75118INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 752 752 - SAPK-75214INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 753 753 - SAPK-75312INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 754 754 - SAPK-75410INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 755 755 - SAPK-75508INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 756 756 - SAPK-75606INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 757 757 - SAPK-75704INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BW 758 758 - SAPK-75802INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  CA-GTF-PCF 0003501359 - [CVE-2024-45279] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Appli (Version 0005) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003501359 exists" id="0003501359" operator="check_note">
      <compliant>NOTE = '0003501359' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003501359 missing and solution with SP available" id="0003501359" operator="check_note:0003501359">
      <compliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_ABA 700 SAPKA70042 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_ABA 701 SAPKA70127 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_ABA 702 SAPKA70227 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_ABA 731 SAPKA73136 -->
         or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_ABA 740 SAPKA74032 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_ABA 750 SAPK-75031INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_ABA 751 SAPK-75119INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_ABA 752 SAPK-75215INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_ABA 75C SAPK-75C15INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_ABA 75D SAPK-75D13INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_ABA 75E SAPK-75E11INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_ABA 75F SAPK-75F09INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_ABA 75G SAPK-75G07INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_ABA 75H SAPK-75H05INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_ABA 75I SAPK-75I03INSAPABA -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '000048' and not( (lpad(SP,4,'0'))  &lt; '0000' )   ) 
        <!-- SAP_BASIS 000048 SAPK-914BHINSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_ABA 700 SAPKA70042 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_ABA 701 SAPKA70127 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_ABA 702 SAPKA70227 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_ABA 731 SAPKA73136 -->
         or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_ABA 740 SAPKA74032 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_ABA 750 SAPK-75031INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_ABA 751 SAPK-75119INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_ABA 752 SAPK-75215INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_ABA 75C SAPK-75C15INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_ABA 75D SAPK-75D13INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_ABA 75E SAPK-75E11INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_ABA 75F SAPK-75F09INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_ABA 75G SAPK-75G07INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_ABA 75H SAPK-75H05INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_ABA 75I SAPK-75I03INSAPABA -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '000048' and (lpad(SP,4,'0'))  &lt; '0000' )  
        <!-- SAP_BASIS 000048 SAPK-914BHINSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003501359 missing and applicable using Correction Instruction" id="0003501359" operator="check_note:0003501359">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0041' )  
        <!-- SAP_ABA 700 SAPKA70004 - SAPKA70041  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_ABA 701 701 - SAPKA70126  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_ABA 702 SAPKA70201 - SAPKA70226  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_ABA 731 SAPKA73101 - SAPKA73135  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_ABA 740 740 - SAPKA74031  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_ABA 750 750 - SAPK-75030INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_ABA 751 751 - SAPK-75118INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_ABA 752 752 - SAPK-75214INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_ABA 75C 75C - SAPK-75C14INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_ABA 75D 75D - SAPK-75D12INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_ABA 75E 75E - SAPK-75E10INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_ABA 75F 75F - SAPK-75F08INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_ABA 75G 75G - SAPK-75G06INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_ABA 75H 75H - SAPK-75H04INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_ABA 75I 75I - SAPK-75I02INSAPABA  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  FI-LOC-SRF-RUN 0003437585 - [CVE-2024-44121] Information Disclosure in SAP S/4 HANA (Statutory Reports) (Version 0006) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003437585 exists" id="0003437585" operator="check_note">
      <compliant>NOTE = '0003437585' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003437585 missing and solution with SP available" id="0003437585" operator="check_note:0003437585">
      <compliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003437585 missing and applicable using Correction Instruction" id="0003437585" operator="check_note:0003437585">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and lpad(SP,4,'0') between '0001' and '0001' )  
        <!-- UIS4HOP1 900 SAPK-90001INUIS4HOP1 - SAPK-90001INUIS4HOP1  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 2.7]  IS-HER-CM 0002256627 - [CVE-2024-45284] Missing authorization check in SAP Student Life Cycle Managemen (Version 0002) (Low) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 2.7] Note 0002256627 exists" id="0002256627" operator="check_note">
      <compliant>NOTE = '0002256627' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] Note 0002256627 missing and solution with SP available" id="0002256627" operator="check_note:0002256627">
      <compliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- IS-PS-CA 618 SAPK-61823INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '800' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- IS-PS-CA 800 SAPK-80002INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- IS-PS-CA 802 SAPK-80215INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- IS-PS-CA 803 SAPK-80313INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- IS-PS-CA 804 SAPK-80411INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- IS-PS-CA 805 SAPK-80509INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- IS-PS-CA 806 SAPK-80607INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- IS-PS-CA 807 SAPK-80705INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- IS-PS-CA 808 SAPK-80803INISPSCA -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- IS-PS-CA 618 SAPK-61823INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '800' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- IS-PS-CA 800 SAPK-80002INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- IS-PS-CA 802 SAPK-80215INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- IS-PS-CA 803 SAPK-80313INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- IS-PS-CA 804 SAPK-80411INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- IS-PS-CA 805 SAPK-80509INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- IS-PS-CA 806 SAPK-80607INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- IS-PS-CA 807 SAPK-80705INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- IS-PS-CA 808 SAPK-80803INISPSCA -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] Note 0002256627 missing and applicable using Correction Instruction" id="0002256627" operator="check_note:0002256627">
      <compliant/>
      <noncompliant>(

      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- IS-PS-CA 617 SAPK-61701INISPSCA - SAPK-61728INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- IS-PS-CA 618 SAPK-61801INISPSCA - SAPK-61822INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- IS-PS-CA 802 802 - SAPK-80214INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- IS-PS-CA 803 803 - SAPK-80312INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- IS-PS-CA 804 804 - SAPK-80410INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- IS-PS-CA 805 805 - SAPK-80508INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- IS-PS-CA 806 806 - SAPK-80606INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- IS-PS-CA 807 807 - SAPK-80704INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- IS-PS-CA 808 808 - SAPK-80802INISPSCA  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  IS-OIL-DS-TD 0003505293 - [CVE-2024-44112] Missing Authorization check in SAP for Oil & Gas (Transportatio (Version 0007) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003505293 exists" id="0003505293" operator="check_note">
      <compliant>NOTE = '0003505293' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003505293 missing and solution with SP available" id="0003505293" operator="check_note:0003505293">
      <compliant>(
      ( COMPONENT = 'IS-OIL' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- IS-OIL 600 SAPK-60037INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- IS-OIL 602 SAPK-60227INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- IS-OIL 603 SAPK-60326INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- IS-OIL 604 SAPK-60427INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- IS-OIL 605 SAPK-60524INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- IS-OIL 606 SAPK-60634INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- IS-OIL 617 SAPK-61729INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- IS-OIL 618 SAPK-61823INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- IS-OIL 802 SAPK-80215INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- IS-OIL 803 SAPK-80313INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- IS-OIL 804 SAPK-80411INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- IS-OIL 805 SAPK-80509INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '806' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- IS-OIL 806 SAPK-80607INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '807' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- IS-OIL 807 SAPK-80705INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '808' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- IS-OIL 808 SAPK-80803INISOIL -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'IS-OIL' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- IS-OIL 600 SAPK-60037INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- IS-OIL 602 SAPK-60227INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- IS-OIL 603 SAPK-60326INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- IS-OIL 604 SAPK-60427INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- IS-OIL 605 SAPK-60524INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- IS-OIL 606 SAPK-60634INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- IS-OIL 617 SAPK-61729INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- IS-OIL 618 SAPK-61823INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- IS-OIL 802 SAPK-80215INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- IS-OIL 803 SAPK-80313INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- IS-OIL 804 SAPK-80411INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- IS-OIL 805 SAPK-80509INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '806' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- IS-OIL 806 SAPK-80607INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '807' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- IS-OIL 807 SAPK-80705INISOIL -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '808' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- IS-OIL 808 SAPK-80803INISOIL -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003505293 missing and applicable using Correction Instruction" id="0003505293" operator="check_note:0003505293">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'IS-OIL' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- IS-OIL 600 SAPK-60001INISOIL - SAPK-60036INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '602' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- IS-OIL 602 602 - SAPK-60226INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0025' )  
        <!-- IS-OIL 603 603 - SAPK-60325INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '604' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- IS-OIL 604 SAPK-60401INISOIL - SAPK-60426INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '605' and lpad(SP,4,'0') between '0000' and '0023' )  
        <!-- IS-OIL 605 605 - SAPK-60523INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '606' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- IS-OIL 606 SAPK-60601INISOIL - SAPK-60633INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- IS-OIL 617 SAPK-61701INISOIL - SAPK-61728INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- IS-OIL 618 618 - SAPK-61822INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- IS-OIL 800 800 - ALL_SP  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- IS-OIL 802 802 - SAPK-80214INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '803' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- IS-OIL 803 803 - SAPK-80312INISOIL  -->
         or
      ( COMPONENT = 'IS-OIL' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- IS-OIL 804 804 - SAPK-80410INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '805' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- IS-OIL 805 805 - SAPK-80508INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '806' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- IS-OIL 806 806 - SAPK-80606INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '807' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- IS-OIL 807 807 - SAPK-80704INISOIL  -->
          or
      ( COMPONENT = 'IS-OIL' and VERSION = '808' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- IS-OIL 808 808 - SAPK-80802INISOIL  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5]  IS-OIL-PRA-REV-OW 0003488341 - [CVE-2024-45286] Missing Authorization check in SAP Production and Revenue Accou (Version 0002) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] Note 0003488341 exists" id="0003488341" operator="check_note">
      <compliant>NOTE = '0003488341' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003488341 missing and solution with SP available" id="0003488341" operator="check_note:0003488341">
      <compliant>(
      ( COMPONENT = 'IS-PRA' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- IS-PRA 605 SAPK-60526INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- IS-PRA 606 SAPK-60634INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- IS-PRA 617 SAPK-61730INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- IS-PRA 618 SAPK-61823INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- IS-PRA 802 SAPK-80215INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- IS-PRA 803 SAPK-80313INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- IS-PRA 804 SAPK-80411INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- IS-PRA 805 SAPK-80509INISPRA -->
         or
      ( COMPONENT = 'S4CEXT' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CEXT 106 SAPK-10607INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CEXT 107 SAPK-10705INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CEXT 108 SAPK-10803INS4CEXT -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'IS-PRA' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- IS-PRA 605 SAPK-60526INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- IS-PRA 606 SAPK-60634INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- IS-PRA 617 SAPK-61730INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- IS-PRA 618 SAPK-61823INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- IS-PRA 802 SAPK-80215INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- IS-PRA 803 SAPK-80313INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- IS-PRA 804 SAPK-80411INISPRA -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- IS-PRA 805 SAPK-80509INISPRA -->
         or
      ( COMPONENT = 'S4CEXT' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CEXT 106 SAPK-10607INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CEXT 107 SAPK-10705INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CEXT 108 SAPK-10803INS4CEXT -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] Note 0003488341 missing and applicable using Correction Instruction" id="0003488341" operator="check_note:0003488341">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'IS-PRA' and VERSION = '605' and lpad(SP,4,'0') between '0016' and '0025' )  
        <!-- IS-PRA 605 SAPK-60516INISPRA - SAPK-60525INISPRA  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '606' and lpad(SP,4,'0') between '0015' and '0033' )  
        <!-- IS-PRA 606 SAPK-60615INISPRA - SAPK-60633INISPRA  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '616' and lpad(SP,4,'0') between '0009' and '0999' )  
        <!-- IS-PRA 616 SAPK-61609INISPRA - ALL_SP  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '617' and lpad(SP,4,'0') between '0008' and '0029' )  
        <!-- IS-PRA 617 SAPK-61708INISPRA - SAPK-61729INISPRA  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '618' and lpad(SP,4,'0') between '0007' and '0022' )  
        <!-- IS-PRA 618 SAPK-61807INISPRA - SAPK-61822INISPRA  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '800' and lpad(SP,4,'0') between '0005' and '0999' )  
        <!-- IS-PRA 800 SAPK-80005INISPRA - ALL_SP  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '801' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- IS-PRA 801 SAPK-80101INISPRA - ALL_SP  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '802' and lpad(SP,4,'0') between '0001' and '0014' )  
        <!-- IS-PRA 802 SAPK-80201INISPRA - SAPK-80214INISPRA  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '803' and lpad(SP,4,'0') between '0001' and '0012' )  
        <!-- IS-PRA 803 SAPK-80301INISPRA - SAPK-80312INISPRA  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '804' and lpad(SP,4,'0') between '0001' and '0010' )  
        <!-- IS-PRA 804 SAPK-80401INISPRA - SAPK-80410INISPRA  -->
          or
      ( COMPONENT = 'IS-PRA' and VERSION = '805' and lpad(SP,4,'0') between '0001' and '0008' )  
        <!-- IS-PRA 805 SAPK-80501INISPRA - SAPK-80508INISPRA  -->
         or
      ( COMPONENT = 'S4CEXT' and VERSION = '106' and lpad(SP,4,'0') between '0001' and '0006' )  
        <!-- S4CEXT 106 SAPK-10601INS4CEXT - SAPK-10606INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CEXT 107 107 - SAPK-10704INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CEXT 108 108 - SAPK-10802INS4CEXT  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  MM-PUR-SSP 0003497347 - [CVE-2024-42378] Cross-Site Scripting (XSS) in eProcurement on S/4HANA (Version 0006) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] Note 0003497347 exists" id="0003497347" operator="check_note">
      <compliant>NOTE = '0003497347' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003497347 missing and solution with SP available" id="0003497347" operator="check_note:0003497347">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 104 SAPK-10411INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 105 SAPK-10509INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 106 SAPK-10607INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_APPL 606 SAPKH60634 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_APPL 617 SAPKH61729 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_APPL 618 SAPK-61823INSAPAPPL -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 104 SAPK-10411INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 105 SAPK-10509INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 106 SAPK-10607INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_APPL 606 SAPKH60634 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_APPL 617 SAPKH61729 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_APPL 618 SAPK-61823INSAPAPPL -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] Note 0003497347 missing and applicable using Correction Instruction" id="0003497347" operator="check_note:0003497347">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 102 102 - SAPK-10214INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 103 103 - SAPK-10312INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 104 104 - SAPK-10410INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 105 105 - SAPK-10508INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 106 106 - SAPK-10606INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 107 107 - SAPK-10704INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and lpad(SP,4,'0') between '0001' and '0033' )  
        <!-- SAP_APPL 606 SAPKH60601 - SAPKH60633  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- SAP_APPL 617 SAPKH61701 - SAPKH61728  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_APPL 618 618 - SAPK-61822INSAPAPPL  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 exists" id="0003454858" operator="check_note">
      <compliant>NOTE = '0003454858' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 missing and solution with SP available" id="0003454858" operator="check_note:0003454858">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0042' )   ) 
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0042' )  
        <!-- SAP_BASIS 700 SAPKB70042 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 701 SAPKB70127 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 702 SAPKB70227 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 731 SAPKB73135 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 740 SAPKB74032 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BASIS 750 SAPK-75031INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BASIS 751 SAPK-75119INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 752 SAPK-75215INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 753 SAPK-75313INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 754 SAPK-75411INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 755 SAPK-75509INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 756 SAPK-75607INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 757 SAPK-75705INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 758 SAPK-75802INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.1] Note 0003454858 missing and applicable using Correction Instruction" id="0003454858" operator="check_note:0003454858">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0015' and '0041' )  
        <!-- SAP_BASIS 700 SAPKB70015 - SAPKB70041  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 701 701 - SAPKB70126  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0026' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70226  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73134  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 740 740 - SAPKB74031  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BASIS 750 750 - SAPK-75030INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BASIS 751 751 - SAPK-75118INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 752 752 - SAPK-75214INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 753 753 - SAPK-75312INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 754 754 - SAPK-75410INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 755 755 - SAPK-75508INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 756 756 - SAPK-75606INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 757 757 - SAPK-75704INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- SAP_BASIS 758 758 - SAPK-75801INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  BW-BEX-ET-WB-7X 0003481588 - [CVE-2024-41729] Information Disclosure vulnerability in the SAP NetWeaver BW (B (Version 0009) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481588 exists" id="0003481588" operator="check_note">
      <compliant>NOTE = '0003481588' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481588 missing and solution with SP available" id="0003481588" operator="check_note:0003481588">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- DW4CORE 300 SAPK-30010INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- DW4CORE 400 SAPK-40003INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0044' )   ) 
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BW 731 SAPKW73136 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BW 758 SAPK-75803INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- DW4CORE 200 SAPK-20017INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- DW4CORE 300 SAPK-30010INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- DW4CORE 400 SAPK-40003INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0044' )  
        <!-- SAP_BW 700 SAPKW70044 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BW 731 SAPKW73136 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 740 SAPKW74032 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_BW 750 SAPK-75031INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_BW 751 SAPK-75119INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 752 SAPK-75215INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 753 SAPK-75313INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 754 SAPK-75411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 755 SAPK-75509INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 756 SAPK-75607INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 757 SAPK-75705INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BW 758 SAPK-75803INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003481588 missing and applicable using Correction Instruction" id="0003481588" operator="check_note:0003481588">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
        ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- DW4CORE 200 SAPK-20007INDW4CORE - SAPK-20016INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- DW4CORE 300 SAPK-30004INDW4CORE - SAPK-30009INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- DW4CORE 400 400 - SAPK-40002INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0027' and '0043' )  
        <!-- SAP_BW 700 SAPKW70027 - SAPKW70043  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0010' and '0026' )  
        <!-- SAP_BW 701 SAPKW70110 - SAPKW70126  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0009' and '0026' )  
        <!-- SAP_BW 702 SAPKW70209 - SAPKW70226  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73135  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BW 740 740 - SAPKW74031  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- SAP_BW 750 750 - SAPK-75030INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_BW 751 751 - SAPK-75118INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 752 752 - SAPK-75214INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 753 753 - SAPK-75312INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 754 754 - SAPK-75410INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 755 755 - SAPK-75508INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 756 756 - SAPK-75606INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 757 757 - SAPK-75704INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BW 758 758 - SAPK-75802INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  FI-FIO-AR 0003251893 - [CVE-2024-45282] HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements) (Version 0005) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003251893 exists" id="0003251893" operator="check_note">
      <compliant>NOTE = '0003251893' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003251893 missing and solution with SP available" id="0003251893" operator="check_note:0003251893">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 102 SAPK-10212INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 103 SAPK-10310INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 104 SAPK-10408INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 105 SAPK-10506INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 106 SAPK-10604INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 107 SAPK-10701INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 102 SAPK-10212INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 103 SAPK-10310INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 104 SAPK-10408INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 105 SAPK-10506INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 106 SAPK-10604INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 107 SAPK-10701INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003251893 missing and applicable using Correction Instruction" id="0003251893" operator="check_note:0003251893">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 102 102 - SAPK-10211INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0001' and '0009' )  
        <!-- S4CORE 103 SAPK-10301INS4CORE - SAPK-10309INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 104 104 - SAPK-10407INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- S4CORE 105 SAPK-10501INS4CORE - SAPK-10505INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 106 106 - SAPK-10603INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') = '0000' )  
        <!-- S4CORE 107 107 - ALL_SP  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7]  FIN-BA 0003483344 - [CVE-2024-39592] Missing Authorization check in SAP PDCE (Version 0009) (High) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 exists" id="0003483344" operator="check_note">
      <compliant>NOTE = '0003483344' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 missing and solution with SP available" id="0003483344" operator="check_note:0003483344">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 missing and applicable using Correction Instruction" id="0003483344" operator="check_note:0003483344">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 102 102 - SAPK-10214INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 103 103 - SAPK-10312INS4CORE  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4COREOP 104 104 - SAPK-10410INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4COREOP 105 105 - SAPK-10508INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4COREOP 106 106 - SAPK-10606INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4COREOP 107 107 - SAPK-10704INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4COREOP 108 108 - SAPK-10801INS4COREOP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and lpad(SP,4,'0') between '0006' and '0026' )  
        <!-- SEM-BW 602 SAPK-60206INSEMBW - SAPK-60226INSEMBW  -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0025' )  
        <!-- SEM-BW 603 603 - SAPK-60325INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and lpad(SP,4,'0') between '0004' and '0026' )  
        <!-- SEM-BW 604 SAPK-60404INSEMBW - SAPK-60426INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- SEM-BW 605 SAPK-60503INSEMBW - SAPK-60523INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '634' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 634 634 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SEM-BW 736 SAPK-73601INSEMBW - SAPK-73634INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- SEM-BW 747 SAPK-74701INSEMBW - SAPK-74728INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SEM-BW 748 748 - SAPK-74822INSEMBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  IS-HER-CM-AD 0003479293 - [CVE-2024-42373] Missing Authorization Check in SAP Student Life Cycle Managemen (Version 0009) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003479293 exists" id="0003479293" operator="check_note">
      <compliant>NOTE = '0003479293' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003479293 missing and solution with SP available" id="0003479293" operator="check_note:0003479293">
      <compliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- IS-PS-CA 618 SAPK-61823INISPSCA -->
         or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- IS-PS-CA 802 SAPK-80214INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- IS-PS-CA 803 SAPK-80312INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- IS-PS-CA 804 SAPK-80410INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- IS-PS-CA 805 SAPK-80508INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- IS-PS-CA 806 SAPK-80606INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- IS-PS-CA 807 SAPK-80704INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- IS-PS-CA 808 SAPK-80802INISPSCA -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- IS-PS-CA 617 SAPK-61729INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- IS-PS-CA 618 SAPK-61823INISPSCA -->
         or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- IS-PS-CA 802 SAPK-80214INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- IS-PS-CA 803 SAPK-80312INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- IS-PS-CA 804 SAPK-80410INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- IS-PS-CA 805 SAPK-80508INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- IS-PS-CA 806 SAPK-80606INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- IS-PS-CA 807 SAPK-80704INISPSCA -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- IS-PS-CA 808 SAPK-80802INISPSCA -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003479293 missing and applicable using Correction Instruction" id="0003479293" operator="check_note:0003479293">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'IS-PS-CA' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- IS-PS-CA 617 SAPK-61701INISPSCA - SAPK-61728INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- IS-PS-CA 618 618 - SAPK-61822INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- IS-PS-CA 802 802 - SAPK-80213INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '803' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- IS-PS-CA 803 803 - SAPK-80311INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- IS-PS-CA 804 804 - SAPK-80409INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '805' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- IS-PS-CA 805 805 - SAPK-80507INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '806' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- IS-PS-CA 806 806 - SAPK-80605INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '807' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- IS-PS-CA 807 807 - SAPK-80703INISPSCA  -->
          or
      ( COMPONENT = 'IS-PS-CA' and VERSION = '808' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- IS-PS-CA 808 808 - SAPK-80801INISPSCA  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 4.3] BC-FES-WGU - Kernel patch required for SNote 3508947" id="0003508947_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1413'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1413'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.3] BC-FES-WGU - Kernel patch required for SNote 3508947" id="0003508947_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0411'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0411'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.3] BC-FES-WGU - Kernel patch required for SNote 3508947" id="0003508947_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0662'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0662'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.3] BC-FES-WGU - Kernel patch required for SNote 3508947" id="0003508947_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0259'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0259'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.3] BC-FES-WGU - Kernel patch required for SNote 3508947" id="0003508947_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0116'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0116'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.3] BC-FES-WGU - Kernel patch required for SNote 3508947" id="0003508947_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0015'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0015'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.3]  0003504390 BC-ABA-LA - [CVE-2024-47586] NULL Pointer Dereference vulnerability in SAP NetWeaver Application  -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1411'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1411'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1415'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1415'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0410'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0410'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0662'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0662'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0259'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0259'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0117'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0117'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0233'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0233'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0016'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0016'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] BC-ABA-LA - Kernel patch required for SNote 3504390" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0003'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0003'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '913_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '913_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7]  FIN-BA 3483344 - [CVE-2024-39592] Missing Authorization check in SAP PDCE (High) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 exists" id="0003483344" operator="check_note">
      <compliant>NOTE = '0003483344' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 missing and solution with SP available" id="0003483344" operator="check_note:0003483344">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] Note 0003483344 missing and applicable using Correction Instruction" id="0003483344" operator="check_note:0003483344">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 102 102 - SAPK-10214INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 103 103 - SAPK-10312INS4CORE  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4COREOP 104 104 - SAPK-10410INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4COREOP 105 105 - SAPK-10508INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4COREOP 106 106 - SAPK-10606INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4COREOP 107 107 - SAPK-10704INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4COREOP 108 108 - SAPK-10801INS4COREOP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SEM-BW 600 SAPKGS6001 - SAPKGS6036  -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and lpad(SP,4,'0') between '0006' and '0026' )  
        <!-- SEM-BW 602 SAPK-60206INSEMBW - SAPK-60226INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0025' )  
        <!-- SEM-BW 603 603 - SAPK-60325INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and lpad(SP,4,'0') between '0004' and '0026' )  
        <!-- SEM-BW 604 SAPK-60404INSEMBW - SAPK-60426INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- SEM-BW 605 SAPK-60503INSEMBW - SAPK-60523INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '634' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 634 634 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SEM-BW 736 SAPK-73601INSEMBW - SAPK-73634INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- SEM-BW 747 SAPK-74701INSEMBW - SAPK-74728INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SEM-BW 748 748 - SAPK-74822INSEMBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.5]  FIN-FSCM-CLM-BAM 0003392049 - [CVE-2024-33000] Missing Authorization check in SAP Bank Account Management (Version 0012) (Low) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] Note 0003392049 exists" id="0003392049" operator="check_note">
      <compliant>NOTE = '0003392049' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] Note 0003392049 missing and solution with SP available" id="0003392049" operator="check_note:0003392049">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 102 SAPK-10214INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 103 SAPK-10312INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 104 SAPK-10410INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 105 SAPK-10508INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] Note 0003392049 missing and applicable using Correction Instruction" id="0003392049" operator="check_note:0003392049">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 101 101 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0002' and '0013' )  
        <!-- S4CORE 102 SAPK-10202INS4CORE - SAPK-10213INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 103 103 - SAPK-10311INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 104 104 - SAPK-10409INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 105 105 - SAPK-10507INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 SAPK-10601INS4CORE - SAPK-10605INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CORE 108 108 - 108  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.5]  FIN-FSCM-CLM-COP 0003498470 - [CVE-2024-47587] Missing authorization check in SAP Cash Management (Cash Operat (Version 0013)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] Note 0003498470 exists" id="0003498470" operator="check_note">
      <compliant>NOTE = '0003498470' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] Note 0003498470 missing and solution with SP available" id="0003498470" operator="check_note:0003498470">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 104 SAPK-10411INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 105 SAPK-10509INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 106 SAPK-10607INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 104 SAPK-10411INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 105 SAPK-10509INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 106 SAPK-10607INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] Note 0003498470 missing and applicable using Correction Instruction" id="0003498470" operator="check_note:0003498470">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 103 103 - SAPK-10312INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 104 104 - SAPK-10410INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 105 105 - SAPK-10508INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 106 106 - SAPK-10606INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 107 107 - SAPK-10704INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 108 108 - SAPK-10802INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1411'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1411'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1415'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1415'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0410'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0410'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0662'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0662'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0259'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0259'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0117'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0117'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0233'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0233'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0016'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0016'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] BC-ABA-LA - - Kernel patch required for SNote 3504390v9" id="0003504390_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0003'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0003'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '913_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '913_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 8.5]  BC-MID-RFC 0003469791 - [CVE-2024-54198] Information Disclosure vulnerability through Remote Function Ca (Version 0012)  -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p2-CVSS 8.5] BC-MID-RFC - Kernel patch required for SNote 3469791v12" id="0003469791_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1410'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1410'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] BC-MID-RFC - Kernel patch required for SNote 3469791v12" id="0003469791_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1413'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1413'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] BC-MID-RFC - Kernel patch required for SNote 3469791v12" id="0003469791_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0410'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0410'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] BC-MID-RFC - Kernel patch required for SNote 3469791v12" id="0003469791_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0662'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0662'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] BC-MID-RFC - Kernel patch required for SNote 3469791v12" id="0003469791_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0257'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0257'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] BC-MID-RFC - Kernel patch required for SNote 3469791v12" id="0003469791_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0114'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0114'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  BC-MID-UCO 0003536361 - [CVE-2024-47585] Missing Authorization check in SAP NetWeaver Application Server (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003536361 exists" id="0003536361" operator="check_note">
      <compliant>NOTE = '0003536361' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003536361 missing and solution with SP available" id="0003536361" operator="check_note:0003536361">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003536361 missing and applicable using Correction Instruction" id="0003536361" operator="check_note:0003536361">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0026' and '0032' )  
        <!-- SAP_BASIS 740 SAPKB74026 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0020' and '0031' )  
        <!-- SAP_BASIS 750 SAPK-75020INSAPBASIS - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0012' and '0019' )  
        <!-- SAP_BASIS 751 SAPK-75112INSAPBASIS - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0008' and '0015' )  
        <!-- SAP_BASIS 752 SAPK-75208INSAPBASIS - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0006' and '0013' )  
        <!-- SAP_BASIS 753 SAPK-75306INSAPBASIS - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 754 754 - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 755 755 - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  PA-FIO-TS 0003522332 - [CVE-2024-47581] Missing Authorization check in SAP HCM (Approve Timesheets vers (Version 0008) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] Note 0003522332 exists" id="0003522332" operator="check_note">
      <compliant>NOTE = '0003522332' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003522332 missing and solution with SP available" id="0003522332" operator="check_note:0003522332">
      <compliant>(
      ( COMPONENT = 'S4HCMGXX' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4HCMGXX 101 SAPK-10114INS4HCMGXX -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4HCMGXX' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4HCMGXX 101 SAPK-10114INS4HCMGXX -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] Note 0003522332 missing and applicable using Correction Instruction" id="0003522332" operator="check_note:0003522332">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4HCMGXX' and VERSION = '101' and lpad(SP,4,'0') between '0006' and '0013' )  
        <!-- S4HCMGXX 101 SAPK-10106INS4HCMGXX - SAPK-10113INS4HCMGXX  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
</targetsystem>