<?xml version="1.0" encoding="utf-8"?>
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

AS ABAP
[p1-CVSS 9.9] 0003537476 BC-MID-ICF - [CVE-2025-0070] Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform (Version 0006)
[p1-CVSS 9.9] 0003550708 BC-MID-ICF - [CVE-2025-0066] Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework ) (Version 0007)
[p2-CVSS 8.8] 0003550816 BD-DB-INF - [CVE-2025-0063] SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Version 0005)
[p3-CVSS 6.5] 0003542698 BC-BMT-WFM - [CVE-2025-0058] Information Disclosure vulnerability in SAP Business Workflow an (Version 0012)
[p3-CVSS 4.3] 0003550674 BC-BMT-WFM - [CVE-2025-0068] Missing Authorization check in Remote Function Call (RFC) in SAP (Version 0006)
[p3-CVSS 5.3] 0003536461 BC-MID-ICF - [CVE-2025-0053] Information Disclosure Vulnerability in SAP NetWeaver Applicatio (Version 0011)


The policy does not check the following Security Notes:
[p2-CVSS 8.7] 0003474398 BI-BIP-INV - [CVE-2025-0061] Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform (Version 0020)
[p2-CVSS 7.8] 0003542533 BC-FES-INS - [CVE-2025-0069] DLL Hijacking vulnerability in SAPSetup (Version 0014)
[p3-CVSS 4.8]  0003514421 BC-JAS-SEC-UME - [CVE-2025-0057] Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (Version 0010)
[p3-CVSS 6.3]  0003540108 BC-WD-JAV - [CVE-2025-0067] Missing Authorization check in SAP NetWeaver Application Server (Version 0006)
[p3-CVSS 6.0]  0003503138 BC-FES-WGU - [CVE-2025-0059] Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (Version 0011)
[p3-CVSS 6.0]  0003472837 BC-FES-GUI - [CVE-2025-0055] Information Disclosure vulnerability in SAP GUI for Windows
[p3-CVSS 6.0]  0003502459 BC-FES-JAV - [CVE-2025-0056] Information Disclosure vulnerability in SAP GUI for Java (Version 0006)
[p4-CVSS 2.2] 0003492169 BI-RA-CRE - Multiple Buffer overflow vulnerabilities in SAP BusinessObjects Business Intelligence Platform (Crystal Reports for Enterprise)(Version 0009)


SAP Security: PatchDay_2025-01
Version: 0001
Date:    15.01.2025
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes:

AS ABAP
[p3-CVSS 5.4] 0003532025 PA-FIO-OVT - [CVE-2025-25241] Missing Authorization check in SAP Fiori Apps Reference Library (My Overtime Requests) (Version 6)
		+++ please also implement SAP Note 3567447 
[p3-CVSS 5.3] 0003546470 SV-SMG-SDD - [CVE-2025-23187] Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) (Version 15)
[p3-CVSS 5.3] 0003561264 BC-BMT-WFM - [CVE-2025-23193] Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (Version 11)
[p3-CVSS 4.3] 0003553753 BC-UPG-ADDON - [CVE-2025-24872] Missing Authorization check in SAP ABAP Platform (ABAP Build Framework) (Version 9)
[p3-CVSS 4.3] 0003547581 SV-SMG-TWB - [CVE-2025-23190] Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI) (Version 6)
[p4-CVSS 3.1] 0003426825 OPU-GW-COR - [CVE-2025-23191] Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP (Version 9)


The policy does not check the following Security Notes:
[p2-CVSS 8.8] 0003417627 BC-JAS-SEC-UME - [CVE-2024-22126] Cross Site Scripting vulnerability in NetWeaver AS Java (User Admin Application) (Version 10)
[p2-CVSS 8.7] 0003525794 BI-BIP-AUT - [CVE-2025-0064] Improper Authorization in SAP BusinessObjects Business Intelligence platform (Central Management Console) (Version 6)
[p2-CVSS 8.6] 0003567551 SRM-CAT-MDM - [CVE-2025-25243] Path traversal vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) (Version 9)
[p2-CVSS 8.1] 0003567974 BC-XS-APR - [CVE-2025-24876] Authentication bypass via authorization code injection in SAP Approuter (Version 7)
[p2-CVSS 7.5] 0003567172 CA-EPC - [CVE-2024-38819] Multiple vulnerabilities in SAP Enterprise Project Connection (Version 4)
[p3-CVSS 6.8] 0003555364 CEC-SCC-CDM-BO-FRW - [CVE-2025-24875] SameSite Defense in Depth not applied for some cookies in SAP Commerce (Version 13)
[p3-CVSS 6.8] 0003559510 CEC-SCC-CDM-BO-FRW - [CVE-2025-24874] Missing Defense in Depth Against Clickjacking in SAP Commerce (Backoffice) (Version 14)
[p3-CVSS 6.1] 0003445708 BI-BIP-INV - [CVE-2025-24867] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence platform (BI Launchpad) (Version 9)
[p3-CVSS 6.1] 0003557138 BC-JAS-SEC-UME - Update 1 to Security Note 3417627 - [CVE-2024-22126] Cross Site Scripting vulnerability in NetWeaver AS Java (User Admin Application) (Version 8)
[p3-CVSS 6.0] 0003562336 BC-FES-GUI - [CVE-2025-24870] Insecure Key & Secret Management vulnerability in SAP GUI for Windows (Version 9)
[p3-CVSS 5.5] 0003540273 CEC-SCC-COM-SRC-SER - [CVE-2024-45216] Multiple vulnerabilities in Apache Solr within SAP Commerce Cloud  (Version 13)
[p3-CVSS 5.4] 0003526203 EP-PDK-HBJ - [CVE-2025-0054] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java (Version 3)
[p3-CVSS 5.3] 0003287784 BC-JAS-DPL - [CVE-2023-24527] Improper Access Control in SAP NetWeaver AS Java for Deploy Service (Version 10)
[p3-CVSS 4.3] 0003550027 BC-WD-JAV - [CVE-2025-24869] Information Disclosure vulnerability in SAP NetWeaver Application Server Java (Version 6)



SAP Security: PatchDay_2025-02
Version: 0001
Date:    13.02.2025
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-03:

AS ABAP
[p2-CVSS 8.8] 0003563927 BC-DWB-TOO-CLA - [CVE-2025-26661] Missing Authorization check in SAP NetWeaver (ABAP Class Builder) (Version 7)
[p2-CVSS 7.7] 0003483344 FIN-BA         - [CVE-2024-39592] Missing Authorization check in SAP PDCE (Version 15)
[p3-CVSS 6.1] 0003562390 BC-FES-WGU     - [CVE-2025-25242] Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP (Version 7)
[p3-CVSS 5.7] 0003552144 BW-WHM-DST-PC 	- [CVE-2025-25244] Missing Authorization Check in SAP Business Warehouse (Process Chains) (Version 13)
[p3-CVSS 4.3] 0003565835 FI-FIO-AR-PAY 	- [CVE-2025-27433] Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements) (Version 6)
[p3-CVSS 4.3] 0003557655 FI-FIO-GL-TRA 	- [CVE-2025-26660] Broken Access Control in  SAP Fiori apps (Posting Library) (Version 9)
[p3-CVSS 4.3] 0003557131 FS-RBD         - [CVE-2025-23188] Missing Authorization check in SAP S/4HANA (RBD) (Version 9)
[p3-CVSS 4.3] 0003474392 MM-FIO-PUR-IR  - [CVE-2025-26656] Missing Authorization check in S/4HANA (Manage Purchasing Info Records) (Version 12)
[p3-CVSS 4.3] 0003475427 PM-FIO-WCM    	- [CVE-2024-41736] Information Disclosure vulnerability in SAP Permit to Work (Version 8)
[p4-CVSS 3.5] 0003561861 CRM-IC-BF      - [CVE-2025-27430] Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center) (Version 5)
[p4-CVSS 3.1] 0003347991 IS-A-JIT       - [CVE-2025-26655] Missing Authorization check in SAP JIT(Outbound) (Version 11)
[p4-CVSS 2.4] 0003568865 CA-GTF-CSC-EDO - [CVE-2025-27432] Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit) (Version 5)


The policy does not check the following Security Notes:
[p2-CVSS 8.8] 0003569602 CEC-SCC-COM-BC-BCOM - [CVE-2025-27434] Cross-Site Scripting (XSS) vulnerability in SAP Commerce (Swagger UI) (Version 23)
[p2-CVSS 8.1] 0003566851 CEC-SCC-COM-BBA-COM - [CVE-2024-38286] Multiple vulnerabilities in Apache Tomcat within SAP Commerce Cloud (Version 8)
[p2-CVSS 8.1] 0003567974 BC-XS-APR           - [CVE-2025-24876] Authentication bypass via authorization code injection in SAP Approuter (Version 9)
[p3-CVSS 6.8] 0003561045 SBO-CRO-SEC         - [CVE-2025-26658] Broken Authentication in SAP Business One (Service Layer) (Version 7)
[p3-CVSS 6.1] 0003552824 BC-FES-WGU     	 - [CVE-2025-26659] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) (Version 14)
[p3-CVSS 5.4] 0003557469 BI-RA-WBI-FE-HTM 	 - [CVE-2025-25245] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (Version 8)
[p3-CVSS 5.4] 0003567246 BC-WD-UR   		 - [CVE-2025-27431] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server Java (Version 9)
[p3-CVSS 5.3] 0003561792 EP-PIN-OBN 		 - [CVE-2025-23194] Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component) (Version 10)
[p3-CVSS 4.9] 0003558132 BC-CST-IC  		 - [CVE-2025-0071] Information Disclosure vulnerability in SAP Web Dispatcher and Internet Communication Manager (Version 6)
[p3-CVSS 4.7] 0003557459 BI-RA-WBI-FE-HTM 	 - [CVE-2025-0062]  Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (Version 16)
[p3-CVSS 4.1] 0003549494 BI-BIP-LCM       	 - [CVE-2025-23185] Information Disclosure in SAP Business Objects Business Intelligence Platform (Version 8)
[p4-CVSS 3.7] 0003562415 CEC-SCC-PLA-PL      - [CVE-2024-38819] Multiple vulnerabilities in Spring Framework within SAP Commerce Cloud and SAP Datahub (Version 16)



SAP Security: PatchDay_2025-03
Version: 0000
Date:    13.03.2025
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-04:

AS ABAP
[p1-CVSS 9.9] 0003581961 CA-LT-ANA - [CVE-2025-27429] Code Injection Vulnerability in SAP S/4HANA (Private Cloud) (Version 3)
[p1-CVSS 9.9] 0003587115 CA-LT-ANA - [CVE-2025-31330] Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) (Version 5)
[p2-CVSS 8.5] 0003554667 BC-MID-RFC - [CVE-2025-23186] Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server (Version 7)
[p2-CVSS 7.7] 0002927164 FS-CYT - [CVE-2025-30014] Directory Traversal vulnerability in SAP Capital Yield Tax Management (Version 7)
[p2-CVSS 7.7] 0003581811 SV-SMG-SDD - [CVE-2025-27428] Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection) (Version 6)
[p3-CVSS 6.7] 0003571093 BW-BCT-WEB - [CVE-2025-30013] Code Injection vulnerability in SAP ERP BW Business Content (Version 2)
[p3-CVSS 4.7] 0003559307 BC-FES-WGU - [CVE-2025-26653] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) (Version 9)
[p3-CVSS 4.4] 0003558864 SV-SMG-IMP - [CVE-2025-30017] Missing Authorization check in SAP Solution Manager (Version 5)
[p3-CVSS 4.3] 0003525971 PP-PI-MD-PRV - [CVE-2025-31333] Odata meta-data tampering in SAP S4CORE entity (Version 12)
[p3-CVSS 4.3] 0003577131 CA-GTF-TS-GMA - [CVE-2025-31331] Authorization Bypass vulnerability in SAP NetWeaver (Version 8)
[p3-CVSS 4.3] 0003568778 BC-SEC-VIR - [CVE-2025-27437] Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface) (Version 9)
[p3-CVSS 4.1] 0003565944 BC-DB-DBI - [CVE-2025-30015] Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) (Version 9)
[p4-CVSS 3.5] 0003561861 CRM-IC-BF - [CVE-2025-27430] Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center) (Version 8)


The policy does not check the following Security Notes:
[p1-CVSS 9.8] 0003572688 EPM-BFC-TCL-ADM-SEC - [CVE-2025-30016] Authentication Bypass Vulnerability in SAP Financial Consolidation (Version 7)
[p2-CVSS 8.8] 0003525794 BI-BIP-AUT - [CVE-2025-0064] Improper Authorization in SAP BusinessObjects Business Intelligence platform (Version 9)
[p2-CVSS 8.1] 0003590984 CEC-SCC-CDM-CKP-COR - [CVE-2024-56337] Time-of-check Time-of-use (TOCTOU) Race Condition vulnerability in Apache Tomcat within SAP Commerce Cloud (Version 3)
[p3-CVSS 6.8] 0003543274 CEC-SCC-CLA-ENV-NWC - [CVE-2025-26654] Potential information disclosure vulnerability in SAP Commerce Cloud (Public Cloud) (Version 1)
[p3-CVSS 6.6] 0003565751 BI-BIP-INS - [CVE-2025-31332] Insecure File permissions vulnerability in SAP BusinessObjects Business Intelligence Platform (Version 8)
[p3-CVSS 5.3] 0003568307 EP-KM-CM - [CVE-2025-26657] Information Disclosure vulnerability in SAP KMC WPC (Version 9)
[p3-CVSS 4.2] 0003539465 CEC-SCC-COM-PRO-CUC - [CVE-2025-27435] Information Disclosure Vulnerability in SAP Commerce Cloud (Version 37)



SAP Security: PatchDay_2025-04
Version: 0000
Date:    10.04.2025
-->
<!--
This Policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-05:

AS ABAP
[p1-CVSS 9.9] 0003581961 CA-LT-ANA - [CVE-2025-27429] Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (Version 4)
[p1-CVSS 9.9] 0003587115 CA-LT-ANA - [CVE-2025-31330] Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) (Version 9)
[p2-CVSS 8.3] 0003600859 SCM-BAS-MDL - [CVE-2025-43010] Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL)) (Version 8)
[p2-CVSS 7.7] 0003591978 CA-LT-PCL - [CVE-2025-43011] Missing Authorization Check in SAP Landscape Transformation (PCL Basis) (Version 7)
[p2-CVSS 7.7] 0003483344 FIN-BA    - [CVE-2024-39592] Missing Authorization check in SAP PDCE (Version 0019)
[p3-CVSS 6.6] 0003577300 OPU-GW-V4 - [CVE-2025-42997] Information Disclosure vulnerability in SAP Gateway Client (Version 4)
[p3-CVSS 6.4] 0003596033 CRM-MD-BP - [CVE-2025-43003] Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise) (Version 12)
[p3-CVSS 6.3] 0002491817 LO-SPM-OUT - [CVE-2025-43009] Missing Authorization check in SAP Service Parts Management (SPM) (Version 5)
[p3-CVSS 6.3] 0002719724 LO-SPM-X - [CVE-2025-43007] Missing Authorization check in SAP Service Parts Management (SPM) (Version 7)
[p3-CVSS 6.2] 0003577287 BC-MID-RFC - [CVE-2025-31329] Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and  ABAP Platform (Version 4)
[p3-CVSS 5.8] 0003585992 PY-PT - [CVE-2025-43008] Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (Version 3)
[p3-CVSS 4.6] 0003446649 PA-FIO-LSO - [CVE-2025-31328] Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution) (Version 8)
[p3-CVSS 4.3] 0003359825 CA-FL-SRV - [CVE-2025-31327] OData meta-data property entity tampering in SAP Field Logistics (Version 8)
[p3-CVSS 4.3] 0003227940 MM-PUR-SVC-SES - [CVE-2025-43002] Missing Authorization check in SAP S4/HANA (OData meta-data property) (Version 8)



The policy does not check the following Security Notes:

[p1-CVSS 10.0] 0003594142 EP-VC-INF - [CVE-2025-31324] Missing Authorization check in SAP NetWeaver (Visual Composer development server) (Version 18)
[p1-CVSS 9.1]  0003604119 EP-VC-INF - [CVE-2025-42999] Insecure Deserialization in SAP NetWeaver (Visual Composer development server) (Version 38)
[p2-CVSS 7.9] 0003586013 BI-BIP-AUT - [CVE-2025-43000] Information Disclosure Vulnerability in SAP Business Objects Business Intelligence Platform (PMW) (Version 4)
[p2-CVSS 8.6] 0003578900 SRM-LA - [CVE-2025-30018] Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit)
[p3-CVSS 6.1] 0003588455 SRM-CAT-MDM - [CVE-2025-43006] Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Master Data Management Catalog) (Version 6)
[p3-CVSS 5.3] 0003571096 MFG-DM - [CVE-2025-43004] Security Misconfiguration Vulnerability in SAP Digital Manufacturing (Production Operator Dashboard) (Version 5)
[p3-CVSS 4.4] 0003558755 EIM-DS-SVR - [CVE-2025-26662] Cross-Site Scripting (XSS) vulnerability in the SAP Data Services Management Console (Version 12)
[p3-CVSS 4.3] 0003574520 BC-FES-GXT - [CVE-2025-43005] Information Disclosure vulnerability in SAP GUI for Windows (Version 6)


SAP Security: PatchDay_2025-05
Version: 001
Date:    15.05.2025
-->
<!--
This Policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-06:

AS ABAP
[p1-CVSS 9.6] 0003600840 BC-MID-RFC-QT - [CVE-2025-42989] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 9)
[p2-CVSS 8.8] 0003609271 GRC-ACP - [CVE-2025-42982] Information Disclosure in SAP GRC (AC Plugin) (Version 7)
[p2-CVSS 8.5] 0003606484 CRM-MW - [CVE-2025-42983] Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis (Version 9)
[p2-CVSS 7.7] 0003591978 CA-LT-PCL - [CVE-2025-43011] Missing Authorization Check in SAP Landscape Transformation (PCL Basis) (Version 9)
[p3-CVSS 6.7] 0003580384 OPU-XBE - [CVE-2025-42993] Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) (Version 6)
[p3-CVSS 5.8] 0003590887 BC-ABA-LA - [CVE-2025-31325] Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation) (Version 11)
[p3-CVSS 5.8] 0003585992 PY-PT - [CVE-2025-43008] Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (Version 3)
[p3-CVSS 5.4] 0003441087 MM-PUR-HUB-CTR - [CVE-2025-42984] Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) (Version 8)
[p3-CVSS 4.3] 0003608058 FIN-FSCM-CLM-BAM - [CVE-2025-42991] Missing Authorization check in SAP S/4HANA (Bank Account Application) (Version 9)
[p3-CVSS 4.3] 0003596850 FI-FIO-AR-PAY - [CVE-2025-42987] Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement) (Version 11)
[p4-CVSS 3.1] 0003426825 OPU-GW-COR - [CVE-2025-23191] Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP (Version 11)
[p4-CVSS 3.0] 0003601169 CA-UI5-SC - [CVE-2025-42990] HTML Injection in Unprotected SAPUI5 applications (Version 4)


The policy does not check the following Security Notes:
[p1-CVSS 9.1] 0003604119 EP-VC-INF - [CVE-2025-42999] Insecure Deserialization in SAP NetWeaver (Visual Composer development server) (Version 39)
[p2-CVSS 7.6] 0003610591 EP-VC-INF - [CVE-2025-42977] Directory Traversal vulnerability in SAP NetWeaver Visual Composer (Version 2)
[p2-CVSS 8.7] 0003474398 BI-BIP-INV - [CVE-2025-0061] Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform (Version 22)
[p2-CVSS 8.2] 0003560693 BI-BIP-INV - [CVE-2025-23192] Cross-Site Scripting (XSS) vulnerability in SAP BusinessObjects Business Intelligence (BI Workspace) (Version 15)
[p2-CVSS 7.5] 0003610006 MDM-FN-MDS-SEC - [CVE-2025-42994] Multiple vulnerabilities in SAP MDM Server (Version 8)
[p3-CVSS 5.3] 0003594258 SBO-INT-B1IF - [CVE-2025-42998] Security misconfiguration vulnerability in SAP Business One Integration Framework (Version 5)
[p4-CVSS 3.7] 0003585545 BI-BIP-INV - [CVE-2025-42988] Server-Side Request Forgery in SAP Business Objects Business Intelligence Platform (Version 4)



SAP Security: PatchDay_2025-06
Version: 001
Date:    12.06.2025
-->
<!--
This Policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-07:

AS ABAP
[p1-CVSS 9.9] 0003618955 SCM-APO-PPS -    [CVE-2025-42967] Code Injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation) (Version 11)
[p2-CVSS 8.1] 0003623440 BC-CCM-CNF-OPM - [CVE-2025-42953] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 6)
[p2-CVSS 7.7] 0003623255 CRM-MW-ADP -     [CVE-2025-42952] Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis (Version 5)
[p3-CVSS 6.7] 0003580384 OPU-XBE -        [CVE-2025-42993] Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) (Version 8)
[p3-CVSS 6.6] 0003577300 OPU-GW-V4 -      [CVE-2025-42997] Information Disclosure vulnerability in SAP Gateway Client (Version 6)
[p3-CVSS 6.1] 0003617131 BC-FES-ITS -     [CVE-2025-42981] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (Version 10)
[p3-CVSS 6.1] 0003604212 BW-BEX-ET-WEB -  [CVE-2025-42962] Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation) (Version 7)
[p3-CVSS 6.1] 0003617380 BI-RA-CR -       [CVE-2025-42985] Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench (Version 6)
[p3-CVSS 6.1] 0003596987 BC-MID-AC -      [CVE-2025-42969] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 9)
[p3-CVSS 5.0] 0003621037 SV-SMG-MON-REP - [CVE-2025-42968] Missing Authorization check in SAP NetWeaver (RFC enabled function module) (Version 2)
[p3-CVSS 4.9] 0003610322 BC-DB-DBI -      [CVE-2025-42961] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 5)
[p3-CVSS 4.3] 0003610056 SV-SMG-SDD -     [CVE-2025-42974] Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) (Version 5)
[p3-CVSS 4.3] 0003608991 BW-BEX-ET -      [CVE-2025-42960] Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools (Version 9)
[p3-CVSS 4.3] 0003626440 SV-SMG-SDD -     [CVE-2025-42986] Missing Authorization check in SAP NetWeaver and ABAP Platform (Version 10)
[p4-CVSS 2.7] 0003608156 BW-BEX-ET -      [CVE-2025-42954] Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application). (Version 6)



The policy does not check the following Security Notes:
[p1-CVSS 10.0] 0003578900 SRM-LA -    [CVE-2025-30018] Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) (Version 6)
[p1-CVSS 9.1] 0003621236 BC-PIN-PCD -     [CVE-2025-42964] Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration (Version 5)
[p1-CVSS 9.1] 0003620498 EP-PIN-FPN -     [CVE-2025-42980] Insecure Deserialization in SAP NetWeaver Enterprise Portal Federated Portal Network (Version 4)
[p1-CVSS 9.1] 0003610892 BC-ILM-DAS -     [CVE-2025-42966] Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service) (Version 11)
[p1-CVSS 9.1] 0003621771 BC-JAS-ADM-LOG - [CVE-2025-42963] Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer ) (Version 8)
[p2-CVSS 8.1] 0003600846 BC-MID-RFC - [CVE-2025-42959] Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476 (Version 9)
[p2-CVSS 8.0] 0003565279 BI-BIP-CMC  -    [CVE-2024-53677] Insecure File Operations vulnerability in SAP Business Objects Business Intelligence Platform (CMC) (Version 9)
[p2-CVSS 7.6] 0003610591 EP-VC-INF -      [CVE-2025-42977] Directory Traversal vulnerability in SAP NetWeaver Visual Composer (Version 4)
[p3-CVSS 6.9] 0003595143 BC-INS-TLS - [CVE-2025-43001] Multiple Privilege Escalation Vulnerabilities in SAPCAR (Version 5)
[p3-CVSS 5.8] 0003595156 BC-INS-TLS - [CVE-2025-42970] Directory Traversal vulnerability in SAPCAR (Version 6)
[p3-CVSS 5.6] 0003607513 BC-FES-GXT - [CVE-2025-42979] Insecure Key & Secret Management vulnerability in SAP GUI for Windows (Version 8)
[p3-CVSS 5.4] 0003606103 EIM-DS-SVR - [CVE-2025-42973] Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report) (Version 5)
[p3-CVSS 4.1] 0003573199 BI-RA-WBI-FE-HTM - [CVE-2025-31326] HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (Version 12)
[p3-CVSS 4.1] 0003598118 BI-BIP-LCM -     [CVE-2025-42965] Server Side Request Forgery(SSRF) vulnerability in SAP BusinessObjects BI Platform Central Management Console Promo (Version 5)
[p3-CVSS 4.0] 0003595141 BC-INS-TLS - [CVE-2025-42971] Memory Corruption vulnerability in SAPCAR (Version 5)
[p4-CVSS 3.5] 0003557179 BC-JAS-SEC -     [CVE-2025-42978] Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java (Version 7)

SAP Security: PatchDay_2025-07
Version: 001
Date:    10.07.2025
-->
<!--
This Policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-07:

AS ABAP
[p1-CVSS 9.9] 0003618955 SCM-APO-PPS -    [CVE-2025-42967] Code Injection vulnerability in SAP S/4HANA and SAP SCM (Characteristic Propagation) (Version 11)
[p2-CVSS 8.1] 0003623440 BC-CCM-CNF-OPM - [CVE-2025-42953] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 6)
[p2-CVSS 7.7] 0003623255 CRM-MW-ADP -     [CVE-2025-42952] Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis (Version 5)
[p3-CVSS 6.7] 0003580384 OPU-XBE -        [CVE-2025-42993] Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) (Version 8)
[p3-CVSS 6.6] 0003577300 OPU-GW-V4 -      [CVE-2025-42997] Information Disclosure vulnerability in SAP Gateway Client (Version 6)
[p3-CVSS 6.1] 0003617131 BC-FES-ITS -     [CVE-2025-42981] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (Version 10)
[p3-CVSS 6.1] 0003604212 BW-BEX-ET-WEB -  [CVE-2025-42962] Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation) (Version 7)
[p3-CVSS 6.1] 0003617380 BI-RA-CR -       [CVE-2025-42985] Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench (Version 6)
[p3-CVSS 6.1] 0003596987 BC-MID-AC -      [CVE-2025-42969] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 9)
[p3-CVSS 5.0] 0003621037 SV-SMG-MON-REP - [CVE-2025-42968] Missing Authorization check in SAP NetWeaver (RFC enabled function module) (Version 2)
[p3-CVSS 4.9] 0003610322 BC-DB-DBI -      [CVE-2025-42961] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 5)
[p3-CVSS 4.3] 0003610056 SV-SMG-SDD -     [CVE-2025-42974] Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) (Version 5)
[p3-CVSS 4.3] 0003608991 BW-BEX-ET -      [CVE-2025-42960] Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools (Version 9)
[p3-CVSS 4.3] 0003626440 SV-SMG-SDD -     [CVE-2025-42986] Missing Authorization check in SAP NetWeaver and ABAP Platform (Version 10)
[p4-CVSS 2.7] 0003608156 BW-BEX-ET -      [CVE-2025-42954] Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application). (Version 6)



The policy does not check the following Security Notes:
[p1-CVSS 10.0] 0003578900 SRM-LA -    [CVE-2025-30018] Multiple vulnerabilities in SAP Supplier Relationship Management (Live Auction Cockpit) (Version 6)
[p1-CVSS 9.1] 0003621236 BC-PIN-PCD -     [CVE-2025-42964] Insecure Deserialization in SAP NetWeaver Enterprise Portal Administration (Version 5)
[p1-CVSS 9.1] 0003620498 EP-PIN-FPN -     [CVE-2025-42980] Insecure Deserialization in SAP NetWeaver Enterprise Portal Federated Portal Network (Version 4)
[p1-CVSS 9.1] 0003610892 BC-ILM-DAS -     [CVE-2025-42966] Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service) (Version 11)
[p1-CVSS 9.1] 0003621771 BC-JAS-ADM-LOG - [CVE-2025-42963] Insecure Deserialization in SAP NetWeaver Application Server for Java (Log Viewer ) (Version 8)
[p2-CVSS 8.1] 0003600846 BC-MID-RFC - [CVE-2025-42959] Missing Authentication check after implementation of SAP Security Note 3007182 and 3537476 (Version 9)
[p2-CVSS 8.0] 0003565279 BI-BIP-CMC  -    [CVE-2024-53677] Insecure File Operations vulnerability in SAP Business Objects Business Intelligence Platform (CMC) (Version 9)
[p2-CVSS 7.6] 0003610591 EP-VC-INF -      [CVE-2025-42977] Directory Traversal vulnerability in SAP NetWeaver Visual Composer (Version 4)
[p3-CVSS 6.9] 0003595143 BC-INS-TLS - [CVE-2025-43001] Multiple Privilege Escalation Vulnerabilities in SAPCAR (Version 5)
[p3-CVSS 5.8] 0003595156 BC-INS-TLS - [CVE-2025-42970] Directory Traversal vulnerability in SAPCAR (Version 6)
[p3-CVSS 5.6] 0003607513 BC-FES-GXT - [CVE-2025-42979] Insecure Key & Secret Management vulnerability in SAP GUI for Windows (Version 8)
[p3-CVSS 5.4] 0003606103 EIM-DS-SVR - [CVE-2025-42973] Cross-Site Scripting (XSS) vulnerability in SAP Data Services (DQ Report) (Version 5)
[p3-CVSS 4.1] 0003573199 BI-RA-WBI-FE-HTM - [CVE-2025-31326] HTML Injection vulnerability in SAP BusinessObjects Business Intelligence Platform (Web Intelligence) (Version 12)
[p3-CVSS 4.1] 0003598118 BI-BIP-LCM -     [CVE-2025-42965] Server Side Request Forgery(SSRF) vulnerability in SAP BusinessObjects BI Platform Central Management Console Promo (Version 5)
[p3-CVSS 4.0] 0003595141 BC-INS-TLS - [CVE-2025-42971] Memory Corruption vulnerability in SAPCAR (Version 5)
[p4-CVSS 3.5] 0003557179 BC-JAS-SEC -     [CVE-2025-42978] Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java (Version 7)

SAP Security: PatchDay_2025-07
Version: 001
Date:    10.07.2025
-->
<!--
This Policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-08:

AS ABAP
[p1-CVSS 9.9] 0003627998 CA-DT-ANA -   [CVE-2025-42957] Code Injection vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (Version 2)
[p1-CVSS 9.9] 0003581961 CA-LT-ANA -   [CVE-2025-27429] Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (Version 6)
[p1-CVSS 9.9] 0003633838 CA-LT-ANA -   [CVE-2025-42950] Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) (Version 2)
[p2-CVSS 8.1] 0003611184 FIN-SEM-CPM - [CVE-2025-42976] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) (Version 13)
[p3-CVSS 6.9] 0003614804 FIN-FSCM-BNK - [CVE-2025-42946] Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management) (Version 7)
[p3-CVSS 6.1] 0003629871 CRM-BF-ML - [CVE-2025-42948] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform (Version 7)
[p3-CVSS 6.1] 0003597355 BC-MID-ICF - [CVE-2025-42942] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (Version 7)
[p3-CVSS 6.1] 0003596987 BC-MID-AC - [CVE-2025-42969] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 12)
[p3-CVSS 6.1] 0003617131 BC-FES-ITS - [CVE-2025-42981] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (Version 13)
[p3-CVSS 6.1] 0003585491 BC-FES-WGU - [CVE-2025-42945] HTML Injection vulnerability in SAP NetWeaver Application Server ABAP (Version 9)
[p3-CVSS 5.8] 0003585992 PY-PT - [CVE-2025-43008] Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (Version 6)
[p3-CVSS 5.5] 0003540688 FI-LOC-CA-XX - [CVE-2025-42947] Code Injection vulnerability in SAP FICA ODN framework (Version 10)
[p3-CVSS 5.4] 0003602656 BC-SRV-ARL-INT - [CVE-2025-42936] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 6)
[p3-CVSS 4.9] 0003626722 BC-DWB-UTL-BRR - [CVE-2025-42949] Missing Authorization check in ABAP Platform (Version 9)
[p3-CVSS 4.3] 0003616863 CA-DMS - [CVE-2025-42934] CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice) (Version 6)
[p3-CVSS 4.3] 0003577131 CA-GTF-TS-GMA - [CVE-2025-31331] Authorization Bypass vulnerability in SAP NetWeaver (Version 10)
[p3-CVSS 4.1] 0003601480 BC-CST-IC - [CVE-2025-42935] Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) (Version 5)
[p4-CVSS 3.5] 0003624943 CA-FLP-FE-COR - [CVE-2025-42941] Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad) (Version 9)


The policy does not check the following Security Notes:
[p1-CVSS 9.1] 0003610892 BC-ILM-DAS - [CVE-2025-42966] Insecure Deserialization vulnerability in SAP NetWeaver (XML Data Archiving Service) (Version 12)
[p2-CVSS 8.8] 0003625403 SBO-BC-SLD - [CVE-2025-42951] Broken Authorization in SAP Business One (SLD) (Version 11)
[p3-CVSS 6.0] 0003503138 BC-FES-WGU - [CVE-2025-0059] Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) (Version 15)
[p3-CVSS 5.3] 0003561792 EP-PIN-OBN - [CVE-2025-23194] Missing Authentication check in SAP NetWeaver Enterprise Portal (OBN component) (Version 12)
[p3-CVSS 4.5] 0003627845 BC-FES-GUI - [CVE-2025-42943] Information Disclosure in SAP GUI for Windows (Version 7)
[p4-CVSS 3.5] 0003557179 BC-JAS-SEC - [CVE-2025-42978] Insufficiently Secure Hostname Verification for Outbound TLS Connections in SAP NetWeaver Application Server Java (Version 8)
[p4-CVSS 3.5] 0003611345 BC-MID-SCC - [CVE-2025-42955] Missing authorization check in SAP Cloud Connector (Version 7)

SAP Security: PatchDay_2025-08
Version: 001
Date:    14.08.2025
-->
<!--
This Policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-09:

[p1-CVSS 9.6] 0003302162 BC-DOC-RIT - [CVE-2023-27500] Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Version 10)
[p1-CVSS 9.1] 0003627373 BC-OP-AS4 - [CVE-2025-42958] Missing Authentication check in SAP NetWeaver (Version 9)
[p2-CVSS 8.1] 0003635475 CA-DT-CNV-BAS - [CVE-2025-42916] Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (Version 5)
[p2-CVSS 8.1] 0003633002 CA-LT-OBT - [CVE-2025-42929] Missing input validation vulnerability in SAP Landscape Transformation Replication Server (Version 8)
[p2-CVSS 7.7] 0003581811 SV-SMG-SDD - [CVE-2025-27428] Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection) (Version 6)
[p3-CVSS 6.5] 0003643832 PA-FIO-TS - [CVE-2025-42917] Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application) (Version 4)
[p3-CVSS 6.5] 0003635587 PA-FIO-TS - [CVE-2025-42912] Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) (Version 3)
[p3-CVSS 6.5] 0003614067 EPM-BPC-NW-SQE - [CVE-2025-42930] Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation (Version 5)
[p3-CVSS 6.1] 0003629325 CRM-BF-ML - [CVE-2025-42938] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform (Version 9)
[p3-CVSS 6.1] 0003647098 SRM-EBP-TEC-ITS - [CVE-2025-42920] Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Version 1)
[p5-CVSS 5.4] 0003409013 FI-FIO-AP - [CVE-2025-42915] Missing Authorization Check in Fiori app (Manage Payment Blocks) (Version 7)
[p3-CVSS 5.0] 0003627644 SV-SMG-SDD - [CVE-2025-42911] Missing Authorization check in SAP NetWeaver (Service Data Download) (Version 11)
[p3-CVSS 4.9] 0003610322 BC-DB-DBI - [CVE-2025-42961] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 5)
[p3-CVSS 4.3] 0003623504 BC-CCM-BTC - [CVE-2025-42918] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing) (Version 4)
[p3-CVSS 4.3] 0003450692 PP-BD-WKC - [CVE-2025-42923] Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups) (Version 8)
[p4-CVSS 3.5] 0003624943 CA-FLP-FE-COR - [CVE-2025-42941] Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad) (Version 9)

The policy does not check the following Security Notes:

[p1-CVSS 10.0] 0003634501 BC-JAS-COR-RMT - [CVE-2023-27500] Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Version 33)
[p1-CVSS 9.9] 0003643865 BC-JAS-DPL - [CVE-2025-42922] Insecure File Operations vulnerability in SAP NetWeaver AS Java (Deploy Web Service) (Version 12)
[p2-CVSS 8.8] 0003642961 SBO-BC-SLD - [CVE-2025-42933] Insecure Storage of Sensitive Information in SAP Business One (SLD)
[p3-CVSS 6.6] 0003620264 CEC-SCC-PLA-PL - [CVE-2025-22228] Security Misconfiguration vulnerability in Spring security within SAP Commerce Cloud and SAP Datahub (Version 5)
[p3-CVSS 6.5] 0003611420 BI-BIP-INV - [CVE-2023-5072] Denial of Service (DoS) vulnerability due to outdated JSON library used in SAP BusinessObjects Business Intelligence (Version 12)
[p3-CVSS 5.3] 0003619465 BC-WD-JAV - [CVE-2025-42926] Missing Authentication check in SAP NetWeaver Application Server Java (Version 10)
[p3-CVSS 4.3] 0003640477 BC-JAS-COR-RMT - [CVE-2025-42925] Predictable Object Identifier vulnerability in SAP NetWeaver AS Java (IIOP Service) (Version 4)
[p4-CVSS 3.4] 0003525295 BC-SRV-FP - [CVE-2025-42927] Information Disclosure due to Outdated OpenSSL Version in SAP NetWeaver AS Java (Adobe Document Service) (Version 7)
[p4-CVSS 3.1] 0003632154 CEC-SCC-PLA-PL - [CVE-2024-13009] Potential Improper Resource Release vulnerability in SAP Commerce Cloud (Version 10)



SAP Security: PatchDay_2025-09
Version: 001
Date:    11.09.2025
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-10:

[p1-CVSS 9.6] 0003302162 BC-DOC-RIT - [CVE-2023-27500] Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Version 13)
[p1-CVSS 9.0] 0003647332 SRM-UIA-SHP-BD - [CVE-2025-48913] Security Misconfiguration vulnerability in SAP Data Hub Integration Suite (Version 3)
[p3-CVSS 5.4] 0003652788 BC-MID-API - [CVE-2025-42901] Code Injection vulnerability in SAP Application Server for ABAP (BAPI Browser) (Version 8)
[p3-CVSS 5.4] 0003642021 BC-ABA-SC - [CVE-2025-42908] Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP (Version 7)
[p3-CVSS 5.4] 0003409013 FI-FIO-AP - [CVE-2025-42915] Missing Authorization Check in Fiori app (Manage Payment Blocks) (Version 9)
[p3-CVSS 5.3] 0003627308 BC-SEC-LGN - [CVE-2025-42902] Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform (Version 5)
[p3-CVSS 4.3] 0003656781 FS-CM - [CVE-2025-42903] User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management (Version 11)
[p3-CVSS 4.3] 0003625683 FI-FIO-AR-PAY - [CVE-2025-42939] Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements) (Version 5)
[p4-CVSS 3.0] 0003643871 BC-VCM-CAL - [CVE-2025-42909] Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances (Version 7)


The policy does not check the following Security Notes:
[p1-CVSS 10.0] 0003660659 BC-JAS-COR - [CVE-2025-42944] Security Hardening for Insecure Deserialization in SAP NetWeaver AS Java (Version 37)
[p1-CVSS 9.8] 0003630595 BC-CCM-PRN - [CVE-2025-42937] Directory Traversal vulnerability in SAP Print Service (Version 6)
[p2-CVSS 7.5] 0003664466 CEC-SCC-COM-SRC-SER - [CVE-2025-5115] Denial of service (DOS) in SAP Commerce Cloud (Search and Navigation) (Version 11)
[p2-CVSS 7.1] 0003658838 CEC-SCC-INT-HUB - [CVE-2025-48913]Security Misconfiguration vulnerability in SAP Data Hub Integration Suite (Version 5)
[p3-CVSS 5.3] 0003634724 CEC-SCC-PLA-PL - [CVE-2025-42906] Directory Traversal vulnerability in SAP Commerce Cloud (Version 3)
[p3-CVSS 4.3] 0003540622 BI-BIP-SRV - [CVE-2025-42907] Server-Side Request Forgery in SAP BI Platform (Version 8)
[p4-CVSS 3.5] 0003617142 BI-RA-WBI - [CVE-2025-31672] Deserialization Vulnerability in SAP BusinessObjects (Web Intelligence and Platform Search) (Version 7)

SAP Security: PatchDay_2025-10
Version: 001
Date:    16.10.2025
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-11:

[p1-CVSS 9.9] 0003647332 SRM-UIA-SHP-BD - [CVE-2025-42910] Unrestricted File Upload Vulnerability in SAP Supplier Relationship Management (Version 5)
[p1-CVSS 9.0] 0003668705 SV-SMG-SVD-SWB - [CVE-2025-42887] Code Injection vulnerability in SAP Solution Manager (Version 12)
[p2-CVSS 7.5] 0003633049 BC-IAM-SSO-CCL - [CVE-2025-42940] Memory Corruption vulnerability in SAP CommonCryptoLib (Version 7)
[p3-CVSS 6.1] 0003642398 PA-ER - [CVE-2025-42924] Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP) (Version 2)
[p3-CVSS 6.1] 0003597355 BC-MID-ICF - [CVE-2025-42942] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (Version 7)
[p3-CVSS 5.4] 0002886616 FI-LOC-SAF-PL - [CVE-2025-42889] SQL Injection vulnerability in SAP Starter Solution (PL SAFT) (Version 8)
[p3-CVSS 5.0] 0003627644 SV-SMG-SDD - [CVE-2025-42911] Missing Authorization check in SAP NetWeaver (Service Data Download) (Version 11)
[p3-CVSS 4.3] 0003643337 BC-DB-DB6 - [CVE-2025-42882] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 4)
[p3-CVSS 4.3] 0003530544 FI-FIO-GL-TRA - [CVE-2025-42899] Missing Authorization check in SAP S4CORE (Manage Journal Entries) (Version 6)
[p4-CVSS 3.1] 0003426825 OPU-GW-COR - [CVE-2025-23191] Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP (Version 11)
[p4-CVSS 2.7] 0003634053 BC-SRV-DX-DXW - [CVE-2025-42883] Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) (Version 6)

The policy does not check the following Security Notes:

[p1-CVSS 10]  0003660659 BC-JAS-COR -     [CVE-2025-42944] Security Hardening for Insecure Deserialization in SAP NetWeaver AS Java (Version 40)
[p1-CVSS 10] 0003666261 BC-SYB-SQA-ADM - [CVE-2025-42890] Insecure key & Secret Management vulnerability in SQL Anywhere Monitor (Non-Gui) (Version 9)
[p2-CVSS 7.5] 0003664466 CEC-SCC-COM-SRC-SER - [CVE-2025-5115] Denial of service (DOS) in SAP Commerce Cloud (Search and Navigation) (Version 11)
[p3-CVSS 6.9] 0003643385 HAN-DB-CLI - [CVE-2025-42895 ] Code Injection vulnerability in SAP HANA JDBC Client (Version 17)
[p3-CVSS 6.8] 0003665900 BC-MID-BUS - [CVE-2025-42892] OS Command Injection vulnerability in SAP Business Connector (Version 5)
[p3-CVSS 6.8] 0003666038 BC-MID-BUS - [CVE-2025-42894] Path Traversal vulnerability in SAP Business Connector (Version 6)
[p3-CVSS 6.5]  0003660969 EP-PIN-APF-CAT - [CVE-2025-42884] JNDI Injection vulnerability in SAP NetWeaver Enterprise Portal (Version 7)
[p3-CVSS 6.1] 0003662000 BC-MID-BUS - [CVE-2025-42893] Open Redirect vulnerability in SAP Business Connector (Version 10)
[p3-CVSS 6.1] 0003665907 BC-MID-BUS - [CVE-2025-42886] Reflected Cross-Site Scripting (XSS) vulnerability in SAP Business Connector (Version 7)
[p3-CVSS 5.8] 0003639264 HAN-DB-ENG- [CVE-2025-42885] Missing authentication in SAP HANA 2.0 (hdbrss) (Version 9)
[p3-CVSS 5.5] 0003651097 BC-FES-GUI - [CVE-2025-42888] Information Disclosure vulnerability in SAP GUI for Windows (Version 12)
[p3-CVSS 5.3]  0003643603 BC-JAS-WEB - [CVE-2025-42919] Information Disclosure vulnerability in SAP NetWeaver Application Server Java (Version 3)
[p3-CVSS 5.3] 0003652901 SBO-BC-SLD - [CVE-2025-42897] Information Disclosure vulnerability in SAP Business One (SLD) (Version 5)
[p4-CVSS 3.5] 0003617142 BI-RA-WBI - [CVE-2025-31672] Deserialization Vulnerability in SAP BusinessObjects (Web Intelligence and Platform Search) (Version 9)

SAP Security: PatchDay_2025-11
Version: 001
Date:    13.11.2025
-->
<!--
This FRUN CSA policy contains rules to check the following ABAP Security Notes published on PatchDay 2025-12:

AS ABAP
[p1-CVSS 9.9] 0003685270 SV-SMG-SVD-SWB - [CVE-2025-42880] Code Injection vulnerability in SAP Solution Manager (Version 4)
[p2-CVSS 8.2] 0003684682 BC-CST-IC - [CVE-2025-42878] Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM) (Version 25)
[p2-CVSS 7.1] 0003672151 FI-GL-GL-G - [CVE-2025-42876] Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger) (Version 10)
[p2-CVSS 7.5] 0003677544 BC-CST-IC - [CVE-2025-42877] Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server (Version 11)
[p3-CVSS 6.6] 0003591163 BC-MID-ICF - [CVE-2025-42875] Missing Authentication check in SAP NetWeaver Internet Communication Framework (Version 8)
[p3-CVSS 6.5] 0003662324 BC-ABA-LI - [CVE-2025-42904] Information Disclosure vulnerability in Application Server ABAP (Version 8)
[p3-CVSS 5.9] 0003676970 CA-UI5-CTR-ROD - [CVE-2025-42873] Denial of Service (DoS) in SAPUI5 framework (Markdown-it component) (Version 1)
[p3-CVSS 5.5] 0003659117 BC-EIM-ESH - [CVE-2025-42891] Missing Authorization check in SAP Enterprise Search for ABAP (Version 6)


The policy does not check the following Security Notes:
[p1-CVSS 9.6] 0003683579 CEC-SCC-PLA-PL - Multiple vulnerabilities in Apache Tomcat within SAP Commerce Cloud (Version 4)
[p1-CVSS 9.1] 0003685286 BC-SYB-SDK - [CVE-2025-42928] Deserialization Vulnerability in SAP jConnect - SDK for ASE (Version 18)
[p2-CVSS 8.2] 0003684682 BC-CST-IC - [CVE-2025-42878] Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM) (Version 25)
[p2-CVSS 7.9] 0003640185 BW-BEX-ET-XC - [CVE-2025-42874] Denial of service (DOS) in SAP NetWeaver (remote service for Xcelsius) (Version 6)
[p2-CVSS 7.5] 0003677544 BC-CST-IC - [CVE-2025-42877] Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server (Version 11)
[p3-CVSS 6.1] 0003662622 EP-CON-SAP - [CVE-2025-42872] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal (Version 9)
[p2-CVSS 7.5] 0003650226 BI-BIP-CMC - [CVE-2025-48976] Denial of service (DOS) in SAP Business Objects (Version 8)
[p3-CVSS 5.4] 0003651390 BI-BIP-INV - [CVE-2025-42896] Server-Side Request Forgery (SSRF) in  SAP BusinessObjects Business Intelligence Platform (Version 27)
[p2-CVSS 8.2] 0003684682 BC-CST-IC - [CVE-2025-42878] Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM) (Version 25)
[p2-CVSS 7.5] 0003677544 BC-CST-IC - [CVE-2025-42877] Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server (Version 11)



SAP Security: PatchDay_2025-12
Version: 001
Date:    11.12.2025
-->
<targetsystem desc="SecNotes2025" id="SecNotes2025" multisql="Yes" version="0000">
  <!-- PRIO HOTNEWS -->
  <!-- ABAP Kernel -->
  <!-- [p1-CVSS 9.9] 0003537476 BC-MID-ICF - [CVE-2025-0070] Improper Authentication in SAP NetWeaver ABAP Server and ABAP Platform (Version 0006) -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>   NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1413'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1413'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>   NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1428'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1428'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>   NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0424'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0424'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>   NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0721'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0721'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0318'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0318'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0210'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0210'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0235'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0235'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0028'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0028'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '912_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0014'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0014'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '913_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '913_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.9] BC-MID-ICF - Kernel patch required for SNote 3537476v6" id="0003537476_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0007'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0007'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- ABAP (SAP_BASIS) -->
  <!-- [p1-CVSS 9.9] 0003550708 BC-MID-ICF - [CVE-2025-0066] Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Internet Communication Framework ) (Version 0007) -->
  <!-- [p1-CVSS 9.9]  BC-MID-ICF 0003550708 - [CVE-2025-0066] Information Disclosure vulnerability in  SAP NetWeaver AS for AB (Version 0007)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="p1-CVSS 9.9] Note 0003550708 exists" id="0003550708" operator="check_note">
      <compliant>NOTE = '0003550708' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] Note 0003550708 missing and solution with SP available" id="0003550708" operator="check_note:0003550708">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 912 SAPK-91211INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '913' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 913 SAPK-91306INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 914 SAPK-91401INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 912 SAPK-91211INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '913' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 913 SAPK-91306INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 914 SAPK-91401INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] Note 0003550708 missing and applicable using Correction Instruction" id="0003550708" operator="check_note:0003550708">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 740 740 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 750 750 - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_BASIS 751 751 - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 752 752 - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 753 753 - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 754 754 - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 755 755 - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH -->
  <!-- [p2-CVSS 8.8] BC-DB-INF 0003550816 - [CVE-2025-0063] SQL Injection vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Version 0005)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.8] Note 0003550816 exists" id="0003550816" operator="check_note">
      <compliant>NOTE = '0003550816' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.8] Note 0003550816 missing and solution with SP available" id="0003550816" operator="check_note:0003550816">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.8] Note 0003550816 missing and applicable using Correction Instruction" id="0003550816" operator="check_note:0003550816">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 740 740 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 750 750 - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_BASIS 751 751 - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 752 752 - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 753 753 - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 754 754 - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 755 755 - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 8.7] 0003474398 BI-BIP-INV - [CVE-2025-0061] Multiple vulnerabilities in SAP BusinessObjects Business Intelligence Platform (Version 20) -->
  <configstore name="BOBJ_VERSION" name_extended="" sci_id="S00123">
    <checkitem desc="[p2-CVSS 8.7] BI-BIP-INV - BOBJ BI Platform update required for SNote 3474398v17" id="0003474398" not_found="ignore">
      <compliant>(
		( name = 'VERSION' and substring(VALUE,0,6) = '14.2.9' AND substring(VALUE,0,11) &gt;= '14.2.9.5104' )	
        <!-- SBOP BI PLATFORM SERVERS 4.2	SP009	002100 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,7) between '14.2.10' and '14.2.19' )	
        <!-- SBOP BI PLATFORM SERVERS 4.2	SP009	002100 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,6) = '14.3.3' AND substring(VALUE,0,11) &gt;= '14.3.3.4992' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP003	001200 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,6) = '14.3.4' AND substring(VALUE,0,11) &gt;= '14.3.4.5099' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP004	000800 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,6) &gt;= '14.3.5' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP005	000000 -->
        	)
      </compliant>
      <noncompliant>(
	    ( name = 'VERSION' and substring(VALUE,0,7) between '14.2.0.' and '14.2.8.' )	
        <!-- SBOP BI PLATFORM SERVERS 4.2	SP009	002100 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,6) = '14.2.9' AND substring(VALUE,0,11) &lt; '14.2.9.5104' )	
        <!-- SBOP BI PLATFORM SERVERS 4.2	SP009	002100 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,7) between '14.3.0.' and '14.3.2.' )	
                or
		( name = 'VERSION' and substring(VALUE,0,6) = '14.3.3' AND substring(VALUE,0,11) &lt; '14.3.3.4992' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP003	001200 -->
        	or       
		( name = 'VERSION' and substring(VALUE,0,6) = '14.3.4' AND substring(VALUE,0,11) &lt; '14.3.4.5099' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP004	000800 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,6) &lt; '14.2.0' )	
        <!-- SBOP BI PLATFORM SERVERS 4.2	SP009	002100 -->
        	)
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM -->
  <!-- [p3-CVSS 6.5]  BC-BMT-WFM 0003542698 - [CVE-2025-0058] Information Disclosure vulnerability in SAP Business Workflow an (Version 0012)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] BC-BMT-WFM - Note 0003542698 exists" id="0003542698" operator="check_note">
      <compliant>NOTE = '0003542698' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] BC-BMT-WFM - Note 0003542698 missing and solution with SP available" id="0003542698" operator="check_note:0003542698">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 912 SAPK-91210INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '913' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 913 SAPK-91305INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '912' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 912 SAPK-91210INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '913' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 913 SAPK-91305INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] BC-BMT-WFM - Note 0003542698 missing and applicable using Correction Instruction" id="0003542698" operator="check_note:0003542698">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0007' and '0013' )  
        <!-- SAP_BASIS 753 SAPK-75307INSAPBASIS - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0005' and '0011' )  
        <!-- SAP_BASIS 754 SAPK-75405INSAPBASIS - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0002' and '0009' )  
        <!-- SAP_BASIS 755 SAPK-75502INSAPBASIS - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  BC-BMT-WFM 0003550674 - [CVE-2025-0068] Missing Authorization check in Remote Function Call (RFC) in SAP (Version 0006)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] BC-BMT-WFM - Note 0003550674 exists" id="0003550674" operator="check_note">
      <compliant>NOTE = '0003550674' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] BC-BMT-WFM - Note 0003550674 missing and solution with SP available" id="0003550674" operator="check_note:0003550674">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] BC-BMT-WFM - Note 0003550674 missing and applicable using Correction Instruction" id="0003550674" operator="check_note:0003550674">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0039' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70039 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70124 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70224 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0030' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73130 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0027' and '0032' )  
        <!-- SAP_BASIS 740 SAPKB74027 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0023' and '0031' )  
        <!-- SAP_BASIS 750 SAPK-75023INSAPBASIS - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0014' and '0019' )  
        <!-- SAP_BASIS 751 SAPK-75114INSAPBASIS - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0015' )  
        <!-- SAP_BASIS 752 SAPK-75210INSAPBASIS - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0008' and '0013' )  
        <!-- SAP_BASIS 753 SAPK-75308INSAPBASIS - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0006' and '0011' )  
        <!-- SAP_BASIS 754 SAPK-75406INSAPBASIS - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0004' and '0009' )  
        <!-- SAP_BASIS 755 SAPK-75504INSAPBASIS - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0007' )  
        <!-- SAP_BASIS 756 SAPK-75601INSAPBASIS - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.3]  BC-MID-ICF 0003536461 - [CVE-2025-0053] Information Disclosure Vulnerability in SAP NetWeaver Applicatio (Version 0011)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.3] BC-MID-ICF - Note 0003536461 exists" id="0003536461" operator="check_note">
      <compliant>NOTE = '0003536461' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.3] BC-MID-ICF - Note 0003536461 missing and solution with SP available" id="0003536461" operator="check_note:0003536461">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.3] BC-MID-ICF - Note 0003536461 missing and applicable using Correction Instruction" id="0003536461" operator="check_note:0003536461">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0027' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70027 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0011' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70111 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0007' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70207 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0012' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73112 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0008' and '0032' )  
        <!-- SAP_BASIS 740 SAPKB74008 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 750 750 - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_BASIS 751 751 - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 752 752 - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 753 753 - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 754 754 - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 755 755 - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- JAVA -->
  <!-- [p3-CVSS 4.8]  0003514421 BC-JAS-SEC-UME - [CVE-2025-0057] Cross-Site Scripting vulnerability in SAP NetWeaver AS JAVA (VERSION 0010) -->
  <configstore name="COMP_LEVEL" sci_id="S00120" system_type="JAVA">
    <checkitem desc="[p3-CVSS 4.8] BC-JAS-SEC-UME - Java patches required for SNote 3514421v10" id="0003514421" operator="check_note:0003514421">
      <compliant>
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &gt;= '0016')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &gt;= '0012')   )	or
   	  ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &gt;= '0008')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &gt;= '0005')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &gt;= '0003')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &gt;= '0001')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') &gt;= '0032') ) or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &gt;= '0035')  )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &gt;= '0033')  )	or
   	  ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &gt;= '0032')  )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &gt;= '0016')  )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &gt;= '0006')  )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &gt;= '0002')  )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') &gt;= '0032') ) or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &gt;= '0005')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &gt;= '0005')   )	or
   	  ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &gt;= '0003')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &gt;= '0001')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &gt;= '0001')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &gt;= '0001')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') &gt;= '0032') ) 
      </compliant>
      <complianttext/>
      <noncompliant>
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &lt; '0016')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &lt; '0012')   )	or
   	  ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &lt; '0008')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &lt; '0005')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &lt; '0003')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &lt; '0001')   )	or
          ( component = 'ENGINEAPI' and version = '7.50' and (lpad(SP,4,'0') &lt; '0026') ) or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &lt; '0035')   )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &lt; '0033')   )	or
   	  ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &lt; '0032')   )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &lt; '0016')   )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &lt; '0006')   )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &lt; '0002')   )	or
          ( component = 'SERVERCORE' and version = '7.50' and (lpad(SP,4,'0') &lt; '0026') ) or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &lt; '0005')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &lt; '0005')   )	or
   	  ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &lt; '0003')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &lt; '0001')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &lt; '0001')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &lt; '0001')   )	or
          ( component = 'UMEADMIN' and version = '7.50' and (lpad(SP,4,'0') &lt; '0026') ) 
      </noncompliant>
      <noncomplianttext/>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.3]  0003540108 BC-WD-JAV - [CVE-2025-0067] Missing Authorization check in SAP NetWeaver Application Server(Version 0006) -->
  <configstore name="COMP_LEVEL" sci_id="S00120" system_type="JAVA">
    <checkitem desc="[p3-CVSS 6.3] BC-WD-JAV - WD-RUNTIME patch required for SNote 3540108v6" id="0003540108" operator="check_note:0003540108">
      <compliant>
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0025') and (lpad(PATCH,4,'0') &gt;= '0006')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &gt;= '0006')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &gt;= '0005')   )	or
   	  ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &gt;= '0004')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &gt;= '0003')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &gt;= '0001')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &gt;= '0001')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') &gt;= '0032') ) 
      </compliant>
      <complianttext/>
      <noncompliant>
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0025') and (lpad(PATCH,4,'0') &lt; '0006')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0026') and (lpad(PATCH,4,'0') &lt; '0006')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0027') and (lpad(PATCH,4,'0') &lt; '0005')   )	or
   	  ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0028') and (lpad(PATCH,4,'0') &lt; '0004')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0029') and (lpad(PATCH,4,'0') &lt; '0003')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0030') and (lpad(PATCH,4,'0') &lt; '0001')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') = '0031') and (lpad(PATCH,4,'0') &lt; '0001')   )	or
          ( component = 'WD-RUNTIME' and version = '7.50' and (lpad(SP,4,'0') &lt; '0025') ) 
      </noncompliant>
      <noncomplianttext/>
    </checkitem>
  </configstore>
  <!-- PRIO LOW -->
  <!-- BOBJ -->
  <!-- [p4-CVSS 2.2] 0003492169 BI-RA-CRE - Multiple Buffer overflow vulnerabilities in SAP BusinessObjects Business Intelligence Platform (Crystal Reports for Enterprise)(Version 0009)-->
  <configstore name="BOBJ_VERSION" name_extended="" sci_id="S00123">
    <checkitem desc="[p4-CVSS 2.2] BI-RA-CREV - BOBJ BI Platform update required for SNote 3492169v9" id="0003492169" not_found="ignore">
      <compliant>
		( name = 'VERSION' and substring(VALUE,0,6) = '14.3.4' AND substring(VALUE,0,11) &gt;= '14.3.4.5099' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP004	000800 -->
        	or
		( name = 'VERSION' and substring(VALUE,0,6) &gt;= '14.3.5' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP005	000000 -->
      </compliant>
      <noncompliant>
		( name = 'VERSION' and substring(VALUE,0,6) between '14.1.0' and '14.3.4' )	
        	or       
		( name = 'VERSION' and substring(VALUE,0,6) = '14.3.4' AND substring(VALUE,0,11) &lt; '14.3.4.5099' )	
        <!-- SBOP BI PLATFORM SERVERS 4.3	SP004	000800 -->
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-25241] PA-FIO-OVT - Note 0003532025 exists" id="0003532025" operator="check_note">
      <compliant>NOTE = '0003532025' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-25241] PA-FIO-OVT - Note 0003532025 missing and solution with SP available" id="0003532025" operator="check_note:0003532025">
      <compliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- GBX01HR5 605 SAPK-60533INGBX01HR5 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- GBX01HR5 605 SAPK-60533INGBX01HR5 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-25241] PA-FIO-OVT - Note 0003532025 missing and applicable using Correction Instruction" id="0003532025" operator="check_note:0003532025">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and lpad(SP,4,'0') between '0021' and '0032' )  
        <!-- GBX01HR5 605 SAPK-60521INGBX01HR5 - SAPK-60532INGBX01HR5  -->
          or
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and lpad(SP,4,'0') between '0021' and '0032' )  
        <!-- GBX01HR5 605 SAPK-60521INGBX01HR5 - SAPK-60532INGBX01HR5 manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.3] 0003546470 SV-SMG-SDD - [CVE-2025-23187] Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) (Version 15) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-23187] SV-SMG-SDD - Note 0003546470 exists" id="0003546470" operator="check_note">
      <compliant>NOTE = '0003546470' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-23187] SV-SMG-SDD - Note 0003546470 missing and solution with SP available" id="0003546470" operator="check_note:0003546470">
      <compliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and not( (lpad(SP,4,'0'))  &lt; '0040' )   ) 
        <!-- ST-PI 2008_1_700 SAPK-70040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and not( (lpad(SP,4,'0'))  &lt; '0040' )   ) 
        <!-- ST-PI 2008_1_710 SAPK-71040INSTPI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and (lpad(SP,4,'0'))  &lt; '0040' )  
        <!-- ST-PI 2008_1_700 SAPK-70040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and (lpad(SP,4,'0'))  &lt; '0040' )  
        <!-- ST-PI 2008_1_710 SAPK-71040INSTPI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-23187] SV-SMG-SDD - Note 0003546470 missing and applicable using Correction Instruction" id="0003546470" operator="check_note:0003546470">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and lpad(SP,4,'0') between '0000' and '0039' )  
        <!-- ST-PI 2008_1_700 2008_1_700 - SAPK-70039INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and lpad(SP,4,'0') between '0010' and '0039' )  
        <!-- ST-PI 2008_1_710 2008_1_710 - SAPK-71039INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- ST-PI 740 740 - SAPK-74028INSTPI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.3] 0003561264 BC-BMT-WFM - [CVE-2025-23193] Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP (Version 11) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-23193] BC-BMT-WFM - Note 0003561264 exists" id="0003561264" operator="check_note">
      <compliant>NOTE = '0003561264' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-23193] BC-BMT-WFM - Note 0003561264 missing and solution with SP available" id="0003561264" operator="check_note:0003561264">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BASIS 731 SAPKB73136 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-23193] BC-BMT-WFM - Note 0003561264 missing and applicable using Correction Instruction" id="0003561264" operator="check_note:0003561264">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0039' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70039 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70124 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70224 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0030' and '0035' )  
        <!-- SAP_BASIS 731 SAPKB73130 - SAPKB73135  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0027' and '0032' )  
        <!-- SAP_BASIS 740 SAPKB74027 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0023' and '0031' )  
        <!-- SAP_BASIS 750 SAPK-75023INSAPBASIS - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0014' and '0019' )  
        <!-- SAP_BASIS 751 SAPK-75114INSAPBASIS - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0015' )  
        <!-- SAP_BASIS 752 SAPK-75210INSAPBASIS - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0008' and '0013' )  
        <!-- SAP_BASIS 753 SAPK-75308INSAPBASIS - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0006' and '0011' )  
        <!-- SAP_BASIS 754 SAPK-75406INSAPBASIS - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0004' and '0009' )  
        <!-- SAP_BASIS 755 SAPK-75504INSAPBASIS - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0007' )  
        <!-- SAP_BASIS 756 SAPK-75601INSAPBASIS - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] 0003553753 BC-UPG-ADDON - [CVE-2025-24872] Missing Authorization check in SAP ABAP Platform (ABAP Build Framework) (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-24872] BC-UPG-ADDON - Note 0003553753 exists" id="0003553753" operator="check_note">
      <compliant>NOTE = '0003553753' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-24872] BC-UPG-ADDON - Note 0003553753 missing and solution with SP available" id="0003553753" operator="check_note:0003553753">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] 0003547581 SV-SMG-TWB - [CVE-2025-23190] Missing Authorization check in SAP NetWeaver and ABAP platform (ST-PI) (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-23190] SV-SMG-TWB - Note 0003547581 exists" id="0003547581" operator="check_note">
      <compliant>NOTE = '0003547581' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-23190] SV-SMG-TWB - Note 0003547581 missing and solution with SP available" id="0003547581" operator="check_note:0003547581">
      <compliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and not( (lpad(SP,4,'0'))  &lt; '0040' )   ) 
        <!-- ST-PI 2008_1_700 SAPK-70040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- ST-PI 740 SAPK-74029INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- ST-PI 740 SAPK-74030INSTPI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and (lpad(SP,4,'0'))  &lt; '0040' )  
        <!-- ST-PI 2008_1_710 SAPK-71040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- ST-PI 740 SAPK-74029INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- ST-PI 740 SAPK-74030INSTPI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-23190] SV-SMG-TWB - Note 0003547581 missing and applicable using Correction Instruction" id="0003547581" operator="check_note:0003547581">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and lpad(SP,4,'0') between '0000' and '0039' )  
        <!-- ST-PI 2008_1_700 2008_1_700 - SAPK-70039INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- ST-PI 740 740 - SAPK-74028INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- ST-PI 740 740 - SAPK-74029INSTPI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO LOW -->
  <!-- [p4-CVSS 3.1] 0003426825 OPU-GW-COR - [CVE-2025-23191] Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 exists" id="0003426825" operator="check_note">
      <compliant>NOTE = '0003426825' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 missing and solution with SP available" id="0003426825" operator="check_note:0003426825">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_GWFND 740 SAPK-74033INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_GWFND 750 SAPK-75032INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_GWFND 751 SAPK-75120INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_GWFND 752 SAPK-75216INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_GWFND 753 SAPK-75314INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_GWFND 740 SAPK-74033INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_GWFND 750 SAPK-75032INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_GWFND 751 SAPK-75120INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_GWFND 752 SAPK-75216INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_GWFND 753 SAPK-75314INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 missing and applicable using Correction Instruction" id="0003426825" operator="check_note:0003426825">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and lpad(SP,4,'0') between '0012' and '0032' )  
        <!-- SAP_GWFND 740 SAPK-74012INSAPGWFND - SAPK-74032INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0031' )  
        <!-- SAP_GWFND 750 SAPK-75004INSAPGWFND - SAPK-75031INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_GWFND 751 751 - SAPK-75119INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and lpad(SP,4,'0') between '0011' and '0015' )  
        <!-- SAP_GWFND 752 SAPK-75211INSAPGWFND - SAPK-75215INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and lpad(SP,4,'0') between '0009' and '0013' )  
        <!-- SAP_GWFND 753 SAPK-75309INSAPGWFND - SAPK-75313INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and lpad(SP,4,'0') between '0007' and '0011' )  
        <!-- SAP_GWFND 754 SAPK-75407INSAPGWFND - SAPK-75411INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and lpad(SP,4,'0') between '0005' and '0009' )  
        <!-- SAP_GWFND 755 SAPK-75505INSAPGWFND - SAPK-75509INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and lpad(SP,4,'0') between '0003' and '0007' )  
        <!-- SAP_GWFND 756 SAPK-75603INSAPGWFND - SAPK-75607INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.8] [CVE-2025-26661] BC-DWB-TOO-CLA - Note 0003563927 exists" id="0003563927" operator="check_note">
      <compliant>NOTE = '0003563927' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.8] [CVE-2025-26661] BC-DWB-TOO-CLA - Note 0003563927 missing and solution with SP available" id="0003563927" operator="check_note:0003563927">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 914 SAPK-91404INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 914 SAPK-91404INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.8] [CVE-2025-26661] BC-DWB-TOO-CLA - Note 0003563927 missing and applicable using Correction Instruction" id="0003563927" operator="check_note:0003563927">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 740 740 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 750 750 - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_BASIS 751 751 - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 752 752 - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 753 753 - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 754 754 - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 755 755 - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7] FIN-BA 0003483344 - [CVE-2024-39592] Missing Authorization check in SAP PDCE (Version 15) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2024-39592] FIN-BA - Note 0003483344 exists" id="0003483344" operator="check_note">
      <compliant>NOTE = '0003483344' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2024-39592] FIN-BA - Note 0003483344 missing and solution with SP available" id="0003483344" operator="check_note:0003483344">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2024-39592] FIN-BA - Note 0003483344 missing and applicable using Correction Instruction" id="0003483344" operator="check_note:0003483344">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'HIDDEN' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- HIDDEN 100 100 - ALL_SP  -->
          or
      ( COMPONENT = 'HIDDEN' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- HIDDEN 101 101 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 102 102 - SAPK-10214INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 103 103 - SAPK-10312INS4CORE  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4COREOP 104 104 - SAPK-10410INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4COREOP 105 105 - SAPK-10508INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4COREOP 106 106 - SAPK-10606INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4COREOP 107 107 - SAPK-10704INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4COREOP 108 108 - SAPK-10801INS4COREOP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SEM-BW 600 SAPKGS6001 - SAPKGS6036  -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and lpad(SP,4,'0') between '0006' and '0026' )  
        <!-- SEM-BW 602 SAPK-60206INSEMBW - SAPK-60226INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0025' )  
        <!-- SEM-BW 603 603 - SAPK-60325INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and lpad(SP,4,'0') between '0004' and '0026' )  
        <!-- SEM-BW 604 SAPK-60404INSEMBW - SAPK-60426INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- SEM-BW 605 SAPK-60503INSEMBW - SAPK-60523INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '634' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 634 634 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SEM-BW 736 SAPK-73601INSEMBW - SAPK-73634INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- SEM-BW 747 SAPK-74701INSEMBW - SAPK-74728INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SEM-BW 748 748 - SAPK-74822INSEMBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM -->
  <!-- [p3-CVSS 6.1] BC-FES-WGU 0003562390 - [CVE-2025-25242] Cross-Site Scripting (XSS) in SAP NetWeaver Application Server ABAP (Version 7)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-25242] BC-FES-WGU - Note 0003562390 exists" id="0003562390" operator="check_note">
      <compliant>NOTE = '0003562390' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-25242] BC-FES-WGU - Note 0003562390 missing and solution with SP available" id="0003562390" operator="check_note:0003562390">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 914 SAPK-91404INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 914 SAPK-91404INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-25242] BC-FES-WGU - Note 0003562390 missing and applicable using Correction Instruction" id="0003562390" operator="check_note:0003562390">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0009' and '0032' )  
        <!-- SAP_BASIS 740 SAPKB74009 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0001' and '0031' )  
        <!-- SAP_BASIS 750 SAPK-75001INSAPBASIS - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0001' and '0019' )  
        <!-- SAP_BASIS 751 SAPK-75101INSAPBASIS - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 752 752 - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 753 753 - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 754 754 - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 755 755 - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.7] BW-WHM-DST-PC 0003552144 - [CVE-2025-25244] Missing Authorization Check in SAP Business Warehouse (Process Chains) (Version 13)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.7] [CVE-2025-25244] BW-WHM-DST-PC - Note 0003552144 exists" id="0003552144" operator="check_note">
      <compliant>NOTE = '0003552144' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.7] [CVE-2025-25244] BW-WHM-DST-PC - Note 0003552144 missing and solution with SP available" id="0003552144" operator="check_note:0003552144">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- DW4CORE 200 SAPK-20018INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- DW4CORE 300 SAPK-30011INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- DW4CORE 400 SAPK-40004INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- DW4CORE 914 SAPK-91403INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_BW 731 SAPKW73136 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BW 740 SAPKW74033 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BW 750 SAPK-75032INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BW 751 SAPK-75120INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BW 752 SAPK-75216INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BW 753 SAPK-75314INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BW 754 SAPK-75412INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BW 755 SAPK-75510INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BW 756 SAPK-75608INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BW 757 SAPK-75706INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BW 758 SAPK-75804INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- DW4CORE 200 SAPK-20018INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- DW4CORE 300 SAPK-30011INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- DW4CORE 400 SAPK-40004INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- DW4CORE 914 SAPK-91403INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_BW 731 SAPKW73136 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BW 740 SAPKW74033 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BW 750 SAPK-75032INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BW 751 SAPK-75120INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BW 752 SAPK-75216INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BW 753 SAPK-75314INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BW 754 SAPK-75412INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BW 755 SAPK-75510INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BW 756 SAPK-75608INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BW 757 SAPK-75706INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BW 758 SAPK-75804INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.7] [CVE-2025-25244] BW-WHM-DST-PC - Note 0003552144 missing and applicable using Correction Instruction" id="0003552144" operator="check_note:0003552144">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- DW4CORE 200  - SAPK-20017INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- DW4CORE 300 300 - SAPK-30003INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- DW4CORE 400 400 - SAPK-40003INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '730' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_BW 730 SAPKW73001 - ALL_SP  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73135  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BW 740 740 - SAPKW74032  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BW 750 750 - SAPK-75031INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_BW 751 751 - SAPK-75119INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BW 752 752 - SAPK-75215INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BW 753 753 - SAPK-75313INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BW 754 754 - SAPK-75411INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BW 755 755 - SAPK-75509INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BW 756 756 - SAPK-75607INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BW 757 757 - SAPK-75705INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BW 758 758 - SAPK-75803INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] FI-FIO-AR-PAY 0003565835 - [CVE-2025-27433] Broken Access Control vulnerabilities in SAP S/4HANA (Manage Bank Statements) (Version 6)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-27433] FI-FIO-AR-PAY - Note 0003565835 exists" id="0003565835" operator="check_note">
      <compliant>NOTE = '0003565835' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-27433] FI-FIO-AR-PAY - Note 0003565835 missing and solution with SP available" id="0003565835" operator="check_note:0003565835">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-27433] FI-FIO-AR-PAY - Note 0003565835 missing and applicable using Correction Instruction" id="0003565835" operator="check_note:0003565835">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] FI-FIO-GL-TRA 0003557655 - [CVE-2025-26660] Broken Access Control in  SAP Fiori apps (Posting Library) (Version 9)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-26660] FI-FIO-GL-TRA - Note 0003557655 exists" id="0003557655" operator="check_note">
      <compliant>NOTE = '0003557655' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-26660] FI-FIO-GL-TRA - Note 0003557655 missing and solution with SP available" id="0003557655" operator="check_note:0003557655">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-26660] FI-FIO-GL-TRA - Note 0003557655 missing and applicable using Correction Instruction" id="0003557655" operator="check_note:0003557655">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 103 103 - SAPK-10313INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 104 104 - SAPK-10411INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] FS-RBD 0003557131 - [CVE-2025-23188] Missing Authorization check in SAP S/4HANA (RBD) (Version 9)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-23188] FS-RBD - Note 0003557131 exists" id="0003557131" operator="check_note">
      <compliant>NOTE = '0003557131' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-23188] FS-RBD - Note 0003557131 missing and solution with SP available" id="0003557131" operator="check_note:0003557131">
      <compliant>(
      ( COMPONENT = 'EA-FINSERV' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- EA-FINSERV 618 SAPK-61824INEAFINSRV -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'EA-FINSERV' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- EA-FINSERV 618 SAPK-61824INEAFINSRV -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-23188] FS-RBD - Note 0003557131 missing and applicable using Correction Instruction" id="0003557131" operator="check_note:0003557131">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'EA-FINSERV' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0023' )  
        <!-- EA-FINSERV 618 618 - SAPK-61823INEAFINSRV  -->
          or
      ( COMPONENT = 'EA-FINSERV' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- EA-FINSERV 800 800 - ALL_SP  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4CORE 102 102 - SAPK-10215INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 103 103 - SAPK-10313INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 104 104 - SAPK-10411INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] MM-FIO-PUR-IR 0003474392 - [CVE-2025-26656] Missing Authorization check in S/4HANA (Manage Purchasing Info Records) (Version 12)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-26656] MM-FIO-PUR-IR - Note 0003474392 exists" id="0003474392" operator="check_note">
      <compliant>NOTE = '0003474392' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-26656] MM-FIO-PUR-IR - Note 0003474392 missing and solution with SP available" id="0003474392" operator="check_note:0003474392">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-26656] MM-FIO-PUR-IR - Note 0003474392 missing and applicable using Correction Instruction" id="0003474392" operator="check_note:0003474392">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 108 108 - SAPK-10802INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 108 108 - SAPK-10802INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] PM-FIO-WCM 0003475427 - [CVE-2024-41736] Information Disclosure vulnerability in SAP Permit to Work (Version 8)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2024-41736] PM-FIO-WCM - Note 0003475427 exists" id="0003475427" operator="check_note">
      <compliant>NOTE = '0003475427' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2024-41736] PM-FIO-WCM - Note 0003475427 missing and solution with SP available" id="0003475427" operator="check_note:0003475427">
      <compliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- UIS4HOP1 800 SAPK-80004INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- UIS4HOP1 800 SAPK-80004INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- UIS4HOP1 900 SAPK-90002INUIS4HOP1 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2024-41736] PM-FIO-WCM - Note 0003475427 missing and applicable using Correction Instruction" id="0003475427" operator="check_note:0003475427">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and lpad(SP,4,'0') between '0002' and '0003' )  
        <!-- UIS4HOP1 800 SAPK-80002INUIS4HOP1 - SAPK-80003INUIS4HOP1  -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- UIS4HOP1 900 900 - SAPK-90001INUIS4HOP1  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO LOW -->
  <!-- [p4-CVSS 2.4] CA-GTF-CSC-EDO 0003568865 - [CVE-2025-27432] Missing Authorization check in SAP Electronic Invoicing for Brazil (eDocument Cockpit) (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 2.4] [CVE-2025-27432] CA-GTF-CSC-EDO - Note 0003568865 exists" id="0003568865" operator="check_note">
      <compliant>NOTE = '0003568865' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.4] [CVE-2025-27432] CA-GTF-CSC-EDO - Note 0003568865 missing and solution with SP available" id="0003568865" operator="check_note:0003568865">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_APPL 617 SAPKH61730 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SAP_APPL 618 SAPK-61824INSAPAPPL -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_APPL 617 SAPKH61730 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SAP_APPL 618 SAPK-61824INSAPAPPL -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.4] [CVE-2025-27432] CA-GTF-CSC-EDO - Note 0003568865 missing and applicable using Correction Instruction" id="0003568865" operator="check_note:0003568865">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4CORE 102 102 - SAPK-10215INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 103 103 - SAPK-10313INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 104 104 - SAPK-10411INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 107 107 - SAPK-10704INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 108 108 - SAPK-10802INS4CORE  -->
         or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- SAP_APPL 617 SAPKH61701 - SAPKH61729  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0023' )  
        <!-- SAP_APPL 618 618 - SAPK-61823INSAPAPPL  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.5] CRM-IC-BF 0003561861 - [CVE-2025-27430] Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center) (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-27430] CRM-IC-BF - Note 0003561861 exists" id="0003561861" operator="check_note">
      <compliant>NOTE = '0003561861' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-27430] CRM-IC-BF - Note 0003561861 missing and solution with SP available" id="0003561861" operator="check_note:0003561861">
      <compliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- BBPCRM 701 SAPKU70124 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- BBPCRM 702 SAPKU70230 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- BBPCRM 714 SAPK-71424INBBPCRM -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CEXT 107 SAPK-10706INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CEXT 108 SAPK-10804INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CRM 100 SAPK-10010INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CRM 200 SAPK-20011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CRM 204 SAPK-20412INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CRM 205 SAPK-20510INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CRM 206 SAPK-20608INS4CRM -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- S4FND 102 SAPK-10216INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4FND 103 SAPK-10314INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4FND 104 SAPK-10412INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4FND 105 SAPK-10510INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4FND 106 SAPK-10608INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 107 SAPK-10706INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 108 SAPK-10804INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- WEBCUIF 731 SAPK-73135INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- WEBCUIF 747 SAPK-74730INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- WEBCUIF 748 SAPK-74824INWEBCUIF -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- BBPCRM 701 SAPKU70124 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- BBPCRM 702 SAPKU70230 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- BBPCRM 714 SAPK-71424INBBPCRM -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CEXT 107 SAPK-10706INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CEXT 108 SAPK-10804INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CRM 100 SAPK-10010INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CRM 200 SAPK-20011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CRM 204 SAPK-20412INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CRM 205 SAPK-20510INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CRM 206 SAPK-20608INS4CRM -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- S4FND 102 SAPK-10216INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4FND 103 SAPK-10314INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4FND 104 SAPK-10412INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4FND 105 SAPK-10510INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4FND 106 SAPK-10608INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 107 SAPK-10706INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 108 SAPK-10804INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- WEBCUIF 731 SAPK-73135INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- WEBCUIF 747 SAPK-74730INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- WEBCUIF 748 SAPK-74824INWEBCUIF -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-27430] CRM-IC-BF - Note 0003561861 missing and applicable using Correction Instruction" id="0003561861" operator="check_note:0003561861">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- BBPCRM 701 SAPKU70103 - SAPKU70123  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- BBPCRM 702 SAPKU70201 - SAPKU70229  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '712' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- BBPCRM 712 712 - ALL_SP  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- BBPCRM 713 SAPKU71301 - SAPKU71324  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0023' )  
        <!-- BBPCRM 714 SAPK-71401INBBPCRM - SAPK-71423INBBPCRM  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CEXT 107 107 - SAPK-10705INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CEXT 108 108 - SAPK-10803INS4CEXT  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and lpad(SP,4,'0') between '0001' and '0009' )  
        <!-- S4CRM 100 SAPK-10001INS4CRM - SAPK-10009INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CRM 200 200 - SAPK-20010INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CRM 204 204 - SAPK-20411INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CRM 205 205 - SAPK-20509INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CRM 206 206 - SAPK-20607INS4CRM  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4FND 102 102 - SAPK-10215INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4FND 103 103 - SAPK-10313INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4FND 104 104 - SAPK-10411INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4FND 105 105 - SAPK-10509INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4FND 106 106 - SAPK-10607INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 107 107 - SAPK-10705INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 108 108 - SAPK-10803INS4FND  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- WEBCUIF 701 SAPK-70103INWEBCUIF - SAPK-70123INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- WEBCUIF 731 SAPK-73101INWEBCUIF - SAPK-73134INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- WEBCUIF 747 747 - SAPK-74729INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0023' )  
        <!-- WEBCUIF 748 748 - SAPK-74823INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 800 800 - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '801' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 801 801 - ALL_SP  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.1] IS-A-JIT 0003347991 - [CVE-2025-26655] Missing Authorization check in SAP JIT(Outbound) (Version 11) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-26655] IS-A-JIT - Note 0003347991 exists" id="0003347991" operator="check_note">
      <compliant>NOTE = '0003347991' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-26655] IS-A-JIT - Note 0003347991 missing and solution with SP available" id="0003347991" operator="check_note:0003347991">
      <compliant>(
      ( COMPONENT = 'ECC-DIMP' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- ECC-DIMP 618 SAPK-61821INECCDIMP -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 102 SAPK-10213INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 103 SAPK-10311INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 104 SAPK-10409INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 105 SAPK-10507INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 106 SAPK-10605INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 107 SAPK-10703INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ECC-DIMP' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- ECC-DIMP 618 SAPK-61821INECCDIMP -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 102 SAPK-10213INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 103 SAPK-10311INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 104 SAPK-10409INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 105 SAPK-10507INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 106 SAPK-10605INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 107 SAPK-10703INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-26655] IS-A-JIT - Note 0003347991 missing and applicable using Correction Instruction" id="0003347991" operator="check_note:0003347991">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ECC-DIMP' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- ECC-DIMP 618 618 - SAPK-61820INECCDIMP  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 102 102 - SAPK-10212INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 103 103 - SAPK-10310INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 104 104 - SAPK-10408INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 105 105 - SAPK-10506INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 106 106 - SAPK-10604INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 107 107 - SAPK-10702INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 exists" id="0003581961" operator="check_note">
      <compliant>NOTE = '0003581961' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 missing and solution with SP available" id="0003581961" operator="check_note:0003581961">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 missing and applicable using Correction Instruction" id="0003581961" operator="check_note:0003581961">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 102 102 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 103 103 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 104 104 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 105 105 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 106 106 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 107 107 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.9] CA-LT-ANA 0003587115 - [CVE-2025-31330] Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-31330] CA-LT-ANA - Note 0003587115 exists" id="0003587115" operator="check_note">
      <compliant>NOTE = '0003587115' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-31330] CA-LT-ANA - Note 0003587115 missing and solution with SP available" id="0003587115" operator="check_note:0003587115">
      <compliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-31330] CA-LT-ANA - Note 0003587115 missing and applicable using Correction Instruction" id="0003587115" operator="check_note:0003587115">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_700 2011_1_700 - SAPK-11327INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_710 2011_1_710 - SAPK-11427INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_730 2011_1_730 - SAPK-11527INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_731 2011_1_731 - SAPK-11627INDMIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH-->
  <!-- [p2-CVSS 8.5] BC-MID-RFC 0003554667 - [CVE-2025-23186] Mixed Dynamic RFC Destination vulnerability through Remote Function Call (RFC) in SAP NetWeaver Application Server (Version 7) -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-23186] BC-MID-RFC - Kernel patch required for SNote 3554667v7" id="0003554667_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1414'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1414'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-23186] BC-MID-RFC - Kernel patch required for SNote 3554667v7" id="0003554667_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1433'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1433'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-23186] BC-MID-RFC - Kernel patch required for SNote 3554667v7" id="0003554667_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0500'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0500'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-23186] BC-MID-RFC - Kernel patch required for SNote 3554667v7" id="0003554667_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0725'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0725'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-23186] BC-MID-RFC - Kernel patch required for SNote 3554667v7" id="0003554667_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0322'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0322'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-23186] BC-MID-RFC - Kernel patch required for SNote 3554667v7" id="0003554667_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0214'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0214'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7] FS-CYT 0002927164 - [CVE-2025-30014] Directory Traversal vulnerability in SAP Capital Yield Tax Management (Version 7) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-30014] FS-CYT - Note 0002927164 exists" id="0002927164" operator="check_note">
      <compliant>NOTE = '0002927164' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-30014] FS-CYT - Note 0002927164 missing and solution with SP available" id="0002927164" operator="check_note:0002927164">
      <compliant>(
      ( COMPONENT = 'CYT' and VERSION = '800' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- CYT 800 SAPK-80017INCYT -->
          or
      ( COMPONENT = 'CYT4HANA' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- CYT4HANA 100 SAPK-10001INCYT4HANA -->
         or
      ( COMPONENT = 'CYTERP' and VERSION = '420_700' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- CYTERP 420_700 SAPK-47015INCYTERP -->
          or
      ( COMPONENT = 'IBS' and VERSION = '7.0' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- IBS 7.0 SAPK-70021INIBS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'CYT' and VERSION = '800' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- CYT 800 SAPK-80017INCYT -->
          or
      ( COMPONENT = 'CYT4HANA' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- CYT4HANA 100 SAPK-10001INCYT4HANA -->
         or
      ( COMPONENT = 'CYTERP' and VERSION = '420_700' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- CYTERP 420_700 SAPK-47015INCYTERP -->
          or
      ( COMPONENT = 'IBS' and VERSION = '7.0' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- IBS 7.0 SAPK-70021INIBS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-30014] FS-CYT - Note 0002927164 missing and applicable using Correction Instruction" id="0002927164" operator="check_note:0002927164">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'CYT' and VERSION = '800' and lpad(SP,4,'0') between '0014' and '0016' )  
        <!-- CYT 800 SAPK-80014INCYT - SAPK-80016INCYT  -->
          or
      ( COMPONENT = 'CYT4HANA' and VERSION = '100' and lpad(SP,4,'0') = '0000' )  
        <!-- CYT4HANA 100 100 - 100  -->
         or
      ( COMPONENT = 'CYTERP' and VERSION = '420_700' and lpad(SP,4,'0') between '0003' and '0014' )  
        <!-- CYTERP 420_700 SAPK-47003INCYTERP - SAPK-47014INCYTERP  -->
          or
      ( COMPONENT = 'IBS' and VERSION = '7.0' and lpad(SP,4,'0') between '0012' and '0020' )  
        <!-- IBS 7.0 SAPK-70012INIBS - SAPK-70020INIBS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7] SV-SMG-SDD 0003581811 - [CVE-2025-27428] Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection) (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-27428] SV-SMG-SDD - Note 0003581811 exists" id="0003581811" operator="check_note">
      <compliant>NOTE = '0003581811' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-27428] SV-SMG-SDD - Note 0003581811 missing and solution with SP available" id="0003581811" operator="check_note:0003581811">
      <compliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and not( (lpad(SP,4,'0'))  &lt; '0041' )   ) 
        <!-- ST-PI 2008_1_700 SAPK-70041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and not( (lpad(SP,4,'0'))  &lt; '0041' )   ) 
        <!-- ST-PI 2008_1_710 SAPK-71041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and (lpad(SP,4,'0'))  &lt; '0041' )  
        <!-- ST-PI 2008_1_700 SAPK-70041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and (lpad(SP,4,'0'))  &lt; '0041' )  
        <!-- ST-PI 2008_1_710 SAPK-71041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-27428] SV-SMG-SDD - Note 0003581811 missing and applicable using Correction Instruction" id="0003581811" operator="check_note:0003581811">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_700 SAPKITLRD4 - SAPK-70040INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_710 SAPKITLRE4 - SAPK-71040INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0030' )  
        <!-- ST-PI 740 740 - SAPK-74030INSTPI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM -->
  <!-- [p3-CVSS 6.7] BW-BCT-WEB 0003571093 - [CVE-2025-30013] Code Injection vulnerability in SAP ERP BW Business Content (Version 0002)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-30013] BW-BCT-WEB - Note 0003571093 exists" id="0003571093" operator="check_note">
      <compliant>NOTE = '0003571093' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-30013] BW-BCT-WEB - Note 0003571093 missing and solution with SP available" id="0003571093" operator="check_note:0003571093">
      <compliant>(
      ( COMPONENT = 'BI_CONT' and VERSION = '707' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- BI_CONT 707 SAPK-70743INBICONT -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '737' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- BI_CONT 737 SAPK-73743INBICONT -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- BI_CONT 747 SAPK-74743INBICONT -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- BI_CONT 757 SAPK-75736INBICONT -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BI_CONT' and VERSION = '707' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- BI_CONT 707 SAPK-70743INBICONT -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '737' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- BI_CONT 737 SAPK-73743INBICONT -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- BI_CONT 747 SAPK-74743INBICONT -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- BI_CONT 757 SAPK-75736INBICONT -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-30013] BW-BCT-WEB - Note 0003571093 missing and applicable using Correction Instruction" id="0003571093" operator="check_note:0003571093">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BI_CONT' and VERSION = '707' and lpad(SP,4,'0') between '0000' and '0042' )  
        <!-- BI_CONT 707 707 - SAPK-70742INBICONT  -->
         or
      ( COMPONENT = 'BI_CONT' and VERSION = '737' and lpad(SP,4,'0') between '0000' and '0042' )  
        <!-- BI_CONT 737 737 - SAPK-73742INBICONT  -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '747' and lpad(SP,4,'0') between '0000' and '0042' )  
        <!-- BI_CONT 747 747 - SAPK-74742INBICONT  -->
          or
      ( COMPONENT = 'BI_CONT' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0035' )  
        <!-- BI_CONT 757 757 - SAPK-75735INBICONT  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- ABAP Kernel -->
  <!-- [p3-CVSS 4.7] 0003559307 BC-FES-WGU - [CVE-2025-26653] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP (applications based on SAP GUI for HTML) (Version 9) -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 4.7] [CVE-2025-26653] BC-FES-WGU - Kernel patch required for SNote 3559307v9" id="0003559307_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1414'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1414'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.7] [CVE-2025-26653] BC-FES-WGU - Kernel patch required for SNote 3559307v9" id="0003559307_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1433'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1433'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.7] [CVE-2025-26653] BC-FES-WGU - Kernel patch required for SNote 3559307v9" id="0003559307_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0500'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0500'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.7] [CVE-2025-26653] BC-FES-WGU - Kernel patch required for SNote 3559307v9" id="0003559307_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0725'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0725'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.7] [CVE-2025-26653] BC-FES-WGU - Kernel patch required for SNote 3559307v9" id="0003559307_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0323'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0323'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.7] [CVE-2025-26653] BC-FES-WGU - Kernel patch required for SNote 3559307v9" id="0003559307_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0215'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0215'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.7] [CVE-2025-26653] BC-FES-WGU - Kernel patch required for SNote 3559307v9" id="0003559307_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0015'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0015'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.4] SV-SMG-IMP 0003558864 - [CVE-2025-30017] Missing Authorization check in SAP Solution Manager (Version 5)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.4] [CVE-2025-30017] SV-SMG-IMP - Note 0003558864 exists" id="0003558864" operator="check_note">
      <compliant>NOTE = '0003558864' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.4] [CVE-2025-30017] SV-SMG-IMP - Note 0003558864 missing and solution with SP available" id="0003558864" operator="check_note:0003558864">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 740 SAPKB74033 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.4] [CVE-2025-30017] SV-SMG-IMP - Note 0003558864 missing and applicable using Correction Instruction" id="0003558864" operator="check_note:0003558864">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0009' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70009 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70101 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- SAP_BASIS 740 SAPKB74001 - SAPKB74032  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0001' and '0031' )  
        <!-- SAP_BASIS 750 SAPK-75001INSAPBASIS - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0001' and '0019' )  
        <!-- SAP_BASIS 751 SAPK-75101INSAPBASIS - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0001' and '0015' )  
        <!-- SAP_BASIS 752 SAPK-75201INSAPBASIS - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0001' and '0013' )  
        <!-- SAP_BASIS 753 SAPK-75301INSAPBASIS - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0011' )  
        <!-- SAP_BASIS 754 SAPK-75401INSAPBASIS - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0001' and '0009' )  
        <!-- SAP_BASIS 755 SAPK-75501INSAPBASIS - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0007' )  
        <!-- SAP_BASIS 756 SAPK-75601INSAPBASIS - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- SAP_BASIS 757 SAPK-75701INSAPBASIS - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0001' and '0003' )  
        <!-- SAP_BASIS 758 SAPK-75801INSAPBASIS - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] PP-PI-MD-PRV 0003525971 - [CVE-2025-31333] Odata meta-data tampering in SAP S4CORE entity (Version 12)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31333] PP-PI-MD-PRV - Note 0003525971 exists" id="0003525971" operator="check_note">
      <compliant>NOTE = '0003525971' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31333] PP-PI-MD-PRV - Note 0003525971 missing and solution with SP available" id="0003525971" operator="check_note:0003525971">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31333] PP-PI-MD-PRV - Note 0003525971 missing and applicable using Correction Instruction" id="0003525971" operator="check_note:0003525971">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 107 107 - SAPK-10704INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 108 108 - SAPK-10802INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] CA-GTF-TS-GMA 0003577131 - [CVE-2025-31331] Authorization Bypass vulnerability in SAP NetWeaver (Version 8)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31331] CA-GTF-TS-GMA - Note 0003577131 exists" id="0003577131" operator="check_note">
      <compliant>NOTE = '0003577131' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31331] CA-GTF-TS-GMA - Note 0003577131 missing and solution with SP available" id="0003577131" operator="check_note:0003577131">
      <compliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_ABA 700 SAPKA70043 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_ABA 701 SAPKA70128 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_ABA 702 SAPKA70228 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_ABA 731 SAPKA73137 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_ABA 740 SAPKA74034 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_ABA 750 SAPK-75033INSAPABA -->
         or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_ABA 751 SAPK-75120INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_ABA 752 SAPK-75216INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_ABA 75C SAPK-75C16INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_ABA 75D SAPK-75D14INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_ABA 75E SAPK-75E12INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_ABA 75F SAPK-75F10INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_ABA 75G SAPK-75G08INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_ABA 75H SAPK-75H06INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_ABA 75I SAPK-75I04INSAPABA -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_ABA 700 SAPKA70043 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_ABA 701 SAPKA70128 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_ABA 702 SAPKA70228 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_ABA 731 SAPKA73137 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_ABA 740 SAPKA74034 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_ABA 750 SAPK-75033INSAPABA -->
         or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_ABA 751 SAPK-75120INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_ABA 752 SAPK-75216INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_ABA 75C SAPK-75C16INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_ABA 75D SAPK-75D14INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_ABA 75E SAPK-75E12INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_ABA 75F SAPK-75F10INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_ABA 75G SAPK-75G08INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_ABA 75H SAPK-75H06INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_ABA 75I SAPK-75I04INSAPABA -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31331] CA-GTF-TS-GMA - Note 0003577131 missing and applicable using Correction Instruction" id="0003577131" operator="check_note:0003577131">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_ABA 700 SAPKA70004 - SAPKA70042  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_ABA 701 701 - SAPKA70127  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_ABA 702 SAPKA70201 - SAPKA70227  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and lpad(SP,4,'0') between '0021' and '0036' )  
        <!-- SAP_ABA 731 SAPKA73121 - SAPKA73136  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and lpad(SP,4,'0') between '0018' and '0033' )  
        <!-- SAP_ABA 740 SAPKA74018 - SAPKA74033  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and lpad(SP,4,'0') between '0009' and '0032' )  
        <!-- SAP_ABA 750 SAPK-75009INSAPABA - SAPK-75032INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and lpad(SP,4,'0') between '0004' and '0019' )  
        <!-- SAP_ABA 751 SAPK-75104INSAPABA - SAPK-75119INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_ABA 752 752 - SAPK-75215INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_ABA 75C 75C - SAPK-75C15INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_ABA 75D 75D - SAPK-75D13INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_ABA 75E 75E - SAPK-75E11INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_ABA 75F 75F - SAPK-75F09INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_ABA 75G 75G - SAPK-75G07INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_ABA 75H 75H - SAPK-75H05INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_ABA 75I 75I - SAPK-75I03INSAPABA  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] BC-SEC-VIR 0003568778 - [CVE-2025-27437] Missing Authorization check in SAP NetWeaver Application Server ABAP (Virus Scan Interface) (Version 9)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-27437] BC-SEC-VIR - Note 0003568778 exists" id="0003568778" operator="check_note">
      <compliant>NOTE = '0003568778' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-27437] BC-SEC-VIR - Note 0003568778 missing and solution with SP available" id="0003568778" operator="check_note:0003568778">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_BASIS 750 SAPK-75032INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-27437] BC-SEC-VIR - Note 0003568778 missing and applicable using Correction Instruction" id="0003568778" operator="check_note:0003568778">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0003' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74003 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- SAP_BASIS 750 750 - SAPK-75031INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_BASIS 751 751 - SAPK-75119INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 752 752 - SAPK-75215INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 753 753 - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 754 754 - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 755 755 - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_BASIS 756 756 - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- ABAP Kernel -->
  <!-- [p3-CVSS 4.1] 0003565944 BC-DB-DBI - [CVE-2025-30015] Memory Corruption vulnerability in SAP NetWeaver and ABAP Platform (Application Server ABAP) (Version 9) -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-30015] BC-DB-DBI - Kernel patch required for SNote 3565944v9" id="0003565944_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1439'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1439'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-30015] BC-DB-DBI - Kernel patch required for SNote 3565944v9" id="0003565944_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0512'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0512'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- PRIO LOW -->
  <!-- [p4-CVSS 3.5] CRM-IC-BF 0003561861 - [CVE-2025-27430] Server Side Request Forgery (SSRF) in SAP CRM and SAP S/4 HANA (Interaction Center) (Version 0008) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-27430] CRM-IC-BF - Note 0003561861 exists" id="0003561861" operator="check_note">
      <compliant>NOTE = '0003561861' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-27430] CRM-IC-BF - Note 0003561861 missing and solution with SP available" id="0003561861" operator="check_note:0003561861">
      <compliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- BBPCRM 701 SAPKU70124 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- BBPCRM 702 SAPKU70230 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- BBPCRM 714 SAPK-71424INBBPCRM -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CEXT 107 SAPK-10706INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CEXT 108 SAPK-10804INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CRM 100 SAPK-10010INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CRM 200 SAPK-20011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CRM 204 SAPK-20412INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CRM 205 SAPK-20510INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CRM 206 SAPK-20608INS4CRM -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- S4FND 102 SAPK-10216INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4FND 103 SAPK-10314INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4FND 104 SAPK-10412INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4FND 105 SAPK-10510INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4FND 106 SAPK-10608INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4FND 107 SAPK-10706INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4FND 108 SAPK-10804INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- WEBCUIF 731 SAPK-73135INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- WEBCUIF 747 SAPK-74730INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- WEBCUIF 748 SAPK-74824INWEBCUIF -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- BBPCRM 701 SAPKU70124 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- BBPCRM 702 SAPKU70230 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- BBPCRM 714 SAPK-71424INBBPCRM -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CEXT 107 SAPK-10706INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CEXT 108 SAPK-10804INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CRM 100 SAPK-10010INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CRM 200 SAPK-20011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CRM 204 SAPK-20412INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CRM 205 SAPK-20510INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CRM 206 SAPK-20608INS4CRM -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- S4FND 102 SAPK-10216INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4FND 103 SAPK-10314INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4FND 104 SAPK-10412INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4FND 105 SAPK-10510INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4FND 106 SAPK-10608INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4FND 107 SAPK-10706INS4FND -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4FND 108 SAPK-10804INS4FND -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- WEBCUIF 701 SAPK-70124INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- WEBCUIF 731 SAPK-73135INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- WEBCUIF 747 SAPK-74730INWEBCUIF -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- WEBCUIF 748 SAPK-74824INWEBCUIF -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-27430] CRM-IC-BF - Note 0003561861 missing and applicable using Correction Instruction" id="0003561861" operator="check_note:0003561861">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- BBPCRM 701 SAPKU70103 - SAPKU70123  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- BBPCRM 702 SAPKU70201 - SAPKU70229  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '712' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- BBPCRM 712 712 - ALL_SP  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- BBPCRM 713 SAPKU71301 - SAPKU71324  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0023' )  
        <!-- BBPCRM 714 SAPK-71401INBBPCRM - SAPK-71423INBBPCRM  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CEXT 107 107 - SAPK-10705INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CEXT 108 108 - SAPK-10803INS4CEXT  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and lpad(SP,4,'0') between '0001' and '0009' )  
        <!-- S4CRM 100 SAPK-10001INS4CRM - SAPK-10009INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CRM 200 200 - SAPK-20010INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CRM 204 204 - SAPK-20411INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CRM 205 205 - SAPK-20509INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CRM 206 206 - SAPK-20607INS4CRM  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4FND 102 102 - SAPK-10215INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4FND 103 103 - SAPK-10313INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4FND 104 104 - SAPK-10411INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4FND 105 105 - SAPK-10509INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4FND 106 106 - SAPK-10607INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4FND 107 107 - SAPK-10705INS4FND  -->
          or
      ( COMPONENT = 'S4FND' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4FND 108 108 - SAPK-10803INS4FND  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0023' )  
        <!-- WEBCUIF 701 SAPK-70115INWEBCUIF - SAPK-70123INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '731' and lpad(SP,4,'0') between '0017' and '0034' )  
        <!-- WEBCUIF 731 SAPK-73117INWEBCUIF - SAPK-73134INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '746' and lpad(SP,4,'0') between '0010' and '0999' )  
        <!-- WEBCUIF 746 SAPK-74610INWEBCUIF - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '747' and lpad(SP,4,'0') between '0011' and '0029' )  
        <!-- WEBCUIF 747 SAPK-74711INWEBCUIF - SAPK-74729INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '748' and lpad(SP,4,'0') between '0002' and '0023' )  
        <!-- WEBCUIF 748 SAPK-74802INWEBCUIF - SAPK-74823INWEBCUIF  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '800' and lpad(SP,4,'0') between '0002' and '0999' )  
        <!-- WEBCUIF 800 SAPK-80002INWEBCUIF - ALL_SP  -->
          or
      ( COMPONENT = 'WEBCUIF' and VERSION = '801' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- WEBCUIF 801 801 - ALL_SP  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-31330] CA-LT-ANA - Note 0003587115 exists" id="0003587115" operator="check_note">
      <compliant>NOTE = '0003587115' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-31330] CA-LT-ANA - Note 0003587115 missing and solution with SP available" id="0003587115" operator="check_note:0003587115">
      <compliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- DMIS 2018_1_752 SAPK-20114INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- DMIS 2020 SAPK-20210INDMIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- DMIS 2018_1_752 SAPK-20114INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- DMIS 2020 SAPK-20210INDMIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-31330] CA-LT-ANA - Note 0003587115 missing and applicable using Correction Instruction" id="0003587115" operator="check_note:0003587115">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_700 2011_1_700 - SAPK-11327INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and lpad(SP,4,'0') between '0008' and '0027' )  
        <!-- DMIS 2011_1_700 SAPK-11308INDMIS - SAPK-11327INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_710 2011_1_710 - SAPK-11427INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and lpad(SP,4,'0') between '0008' and '0027' )  
        <!-- DMIS 2011_1_710 SAPK-11408INDMIS - SAPK-11427INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_730 2011_1_730 - SAPK-11527INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and lpad(SP,4,'0') between '0008' and '0027' )  
        <!-- DMIS 2011_1_730 SAPK-11508INDMIS - SAPK-11527INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- DMIS 2011_1_731 2011_1_731 - SAPK-11627INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and lpad(SP,4,'0') between '0008' and '0027' )  
        <!-- DMIS 2011_1_731 SAPK-11608INDMIS - SAPK-11627INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- DMIS 2018_1_752 2018_1_752 - SAPK-20113INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- DMIS 2020 2020 - SAPK-20209INDMIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.9] CA-LT-ANA 0003581961 - [CVE-2025-27429] Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (Version 4)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 exists" id="0003581961" operator="check_note">
      <compliant>NOTE = '0003581961' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 missing and solution with SP available" id="0003581961" operator="check_note:0003581961">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 missing and applicable using Correction Instruction" id="0003581961" operator="check_note:0003581961">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 102 102 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 103 103 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 104 104 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 105 105 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 106 106 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 107 107 - ALL_SP  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH-->
  <!-- [p2-CVSS 8.3] SCM-BAS-MDL 0003600859 - [CVE-2025-43010] Code injection vulnerability in SAP S/4HANA Cloud Private Edition or On Premise(SCM Master Data Layer (MDL)) (Version 8) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.3] [CVE-2025-43010] SCM-BAS-MDL - Note 0003600859 exists" id="0003600859" operator="check_note">
      <compliant>NOTE = '0003600859' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.3] [CVE-2025-43010] SCM-BAS-MDL - Note 0003600859 missing and solution with SP available" id="0003600859" operator="check_note:0003600859">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SCM_BASIS 702 SAPK-70230INSCMBASIS -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SCM_BASIS 713 SAPK-71331INSCMBASIS -->
         or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SCM_BASIS 714 SAPK-71424INSCMBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SCM_BASIS 702 SAPK-70230INSCMBASIS -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SCM_BASIS 713 SAPK-71331INSCMBASIS -->
         or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SCM_BASIS 714 SAPK-71424INSCMBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.3] [CVE-2025-43010] SCM-BAS-MDL - Note 0003600859 missing and applicable using Correction Instruction" id="0003600859" operator="check_note:0003600859">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4CORE 102 102 - SAPK-10215INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 103 103 - SAPK-10313INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 104 104 - SAPK-10411INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SCM_BASIS 700 SAPK-70001INSCMBASIS - ALL_SP  -->
         or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0999' )  
        <!-- SCM_BASIS 701 SAPK-70103INSCMBASIS - ALL_SP  -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- SCM_BASIS 702 SAPK-70201INSCMBASIS - SAPK-70229INSCMBASIS  -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '712' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SCM_BASIS 712 712 - ALL_SP  -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0030' )  
        <!-- SCM_BASIS 713 SAPK-71301INSCMBASIS - SAPK-71330INSCMBASIS  -->
          or
      ( COMPONENT = 'SCM_BASIS' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0023' )  
        <!-- SCM_BASIS 714 SAPK-71401INSCMBASIS - SAPK-71423INSCMBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7] CA-LT-PCL 0003591978 - [CVE-2025-43011] Missing Authorization Check in SAP Landscape Transformation (PCL Basis) (Version 7) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-43011] CA-LT-PCL - [CVE-2025-43011] CA-LT-PCL - Note 0003591978 exists" id="0003591978" operator="check_note">
      <compliant>NOTE = '0003591978' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-43011] CA-LT-PCL - Note 0003591978 missing and solution with SP available" id="0003591978" operator="check_note:0003591978">
      <compliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- DMIS 2018_1_752 SAPK-20114INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- DMIS 2020 SAPK-20210INDMIS -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- DMIS 2018_1_752 SAPK-20114INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- DMIS 2020 SAPK-20210INDMIS -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-43011] CA-LT-PCL - Note 0003591978 missing and applicable using Correction Instruction" id="0003591978" operator="check_note:0003591978">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- DMIS 2011_1_700 SAPK-11324INDMIS - SAPK-11327INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- DMIS 2011_1_710 SAPK-11424INDMIS - SAPK-11427INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- DMIS 2011_1_730 SAPK-11524INDMIS - SAPK-11527INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and lpad(SP,4,'0') between '0024' and '0027' )  
        <!-- DMIS 2011_1_731 SAPK-11624INDMIS - SAPK-11627INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- DMIS 2018_1_752 2018_1_752 - SAPK-20113INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- DMIS 2020 2020 - SAPK-20209INDMIS  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4CORE 102 102 - SAPK-10215INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 103 103 - SAPK-10313INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 104 104 - SAPK-10411INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7] FIN-BA 0003483344 - [CVE-2024-39592] Missing Authorization check in SAP PDCE (Version 0019) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2024-39592] FIN-BA - Note 0003483344 exists" id="0003483344" operator="check_note">
      <compliant>NOTE = '0003483344' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2024-39592] FIN-BA - Note 0003483344 missing and solution with SP available" id="0003483344" operator="check_note:0003483344">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4COREOP 104 SAPK-10411INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4COREOP 105 SAPK-10509INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4COREOP 106 SAPK-10607INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4COREOP 107 SAPK-10705INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4COREOP 108 SAPK-10802INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SEM-BW 600 SAPKGS6037 -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 602 SAPK-60227INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SEM-BW 603 SAPK-60326INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SEM-BW 604 SAPK-60427INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SEM-BW 605 SAPK-60524INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SEM-BW 736 SAPK-73635INSEMBW -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SEM-BW 747 SAPK-74729INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SEM-BW 748 SAPK-74823INSEMBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2024-39592] FIN-BA - Note 0003483344 missing and applicable using Correction Instruction" id="0003483344" operator="check_note:0003483344">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 102 102 - SAPK-10214INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 103 103 - SAPK-10312INS4CORE  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4COREOP 104 104 - SAPK-10410INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4COREOP 105 105 - SAPK-10508INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4COREOP 106 106 - SAPK-10606INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4COREOP 107 107 - SAPK-10704INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4COREOP 108 108 - SAPK-10801INS4COREOP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0015' )  
        <!-- SEM-BW 600 SAPKGS6001 - SAPKGS6015  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and lpad(SP,4,'0') between '0016' and '0036' )  
        <!-- SEM-BW 600 SAPKGS6016 - SAPKGS6036  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- SEM-BW 602 SAPK-60201INSEMBW - SAPK-60205INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and lpad(SP,4,'0') between '0006' and '0026' )  
        <!-- SEM-BW 602 SAPK-60206INSEMBW - SAPK-60226INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and lpad(SP,4,'0') between '0001' and '0004' )  
        <!-- SEM-BW 603 SAPK-60301INSEMBW - SAPK-60304INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and lpad(SP,4,'0') between '0005' and '0025' )  
        <!-- SEM-BW 603 SAPK-60305INSEMBW - SAPK-60325INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and lpad(SP,4,'0') between '0001' and '0003' )  
        <!-- SEM-BW 604 SAPK-60401INSEMBW - SAPK-60403INSEMBW  -->
         or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and lpad(SP,4,'0') between '0004' and '0026' )  
        <!-- SEM-BW 604 SAPK-60404INSEMBW - SAPK-60426INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and lpad(SP,4,'0') between '0003' and '0023' )  
        <!-- SEM-BW 605 SAPK-60503INSEMBW - SAPK-60523INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '634' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 634 634 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and lpad(SP,4,'0') between '0001' and '0034' )  
        <!-- SEM-BW 736 SAPK-73601INSEMBW - SAPK-73634INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and lpad(SP,4,'0') between '0001' and '0028' )  
        <!-- SEM-BW 747 SAPK-74701INSEMBW - SAPK-74728INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SEM-BW 748 748 - SAPK-74822INSEMBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM-->
  <!-- [p3-CVSS 6.6] OPU-GW-V4 0003577300 - [CVE-2025-42997] Information Disclosure vulnerability in SAP Gateway Client (Version 4) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 exists" id="0003577300" operator="check_note">
      <compliant>NOTE = '0003577300' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 missing and solution with SP available" id="0003577300" operator="check_note:0003577300">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_GWFND 752 SAPK-75217INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_GWFND 753 SAPK-75315INSAPGWFND -->
         or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_GWFND 752 SAPK-75217INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_GWFND 753 SAPK-75315INSAPGWFND -->
         or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 missing and applicable using Correction Instruction" id="0003577300" operator="check_note:0003577300">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0016' )  
        <!-- SAP_GWFND 752 SAPK-75210INSAPGWFND - SAPK-75216INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and lpad(SP,4,'0') between '0008' and '0014' )  
        <!-- SAP_GWFND 753 SAPK-75309INSAPGWFND - SAPK-75314INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and lpad(SP,4,'0') between '0006' and '0011' )  
        <!-- SAP_GWFND 754 SAPK-75407INSAPGWFND - SAPK-75411INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and lpad(SP,4,'0') between '0004' and '0009' )  
        <!-- SAP_GWFND 755 SAPK-75505INSAPGWFND - SAPK-75509INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and lpad(SP,4,'0') between '0002' and '0007' )  
        <!-- SAP_GWFND 756 SAPK-75603INSAPGWFND - SAPK-75607INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- SAP_GWFND 757 SAPK-75702INSAPGWFND - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 SAPK-75802INSAPGWFND - SAPK-75803INSAPGWFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.4] CRM-MD-BP 0003596033 - [CVE-2025-43003] Information Disclosure vulnerability in SAP S/4HANA (Private Cloud & On-Premise) (Version 12)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.4] [CVE-2025-43003]  CRM-MD-BP - Note 0003596033 exists" id="0003596033" operator="check_note">
      <compliant>NOTE = '0003596033' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.4] [CVE-2025-43003]  CRM-MD-BP - Note 0003596033 missing and solution with SP available" id="0003596033" operator="check_note:0003596033">
      <compliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- BBPCRM 702 SAPKU70231 -->
         or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- BBPCRM 714 SAPK-71424INBBPCRM -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CEXT 107 SAPK-10706INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CEXT 108 SAPK-10804INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CRM 204 SAPK-20412INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CRM 205 SAPK-20510INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CRM 206 SAPK-20608INS4CRM -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- BBPCRM 702 SAPKU70231 -->
         or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- BBPCRM 713 SAPKU71325 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- BBPCRM 714 SAPK-71424INBBPCRM -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CEXT 107 SAPK-10706INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CEXT 108 SAPK-10804INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CRM 204 SAPK-20412INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CRM 205 SAPK-20510INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CRM 206 SAPK-20608INS4CRM -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.4] [CVE-2025-43003]  CRM-MD-BP - Note 0003596033 missing and applicable using Correction Instruction" id="0003596033" operator="check_note:0003596033">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0030' )  
        <!-- BBPCRM 702 SAPKU70201 - SAPKU70230  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '712' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- BBPCRM 712 712 - ALL_SP  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- BBPCRM 713 SAPKU71301 - SAPKU71324  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0023' )  
        <!-- BBPCRM 714 SAPK-71401INBBPCRM - SAPK-71423INBBPCRM  -->
         or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CEXT 107 107 - SAPK-10705INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CEXT 108 108 - SAPK-10803INS4CEXT  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CRM 204 204 - SAPK-20411INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CRM 205 205 - SAPK-20509INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CRM 206 206 - SAPK-20607INS4CRM  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.3] LO-SPM-OUT 0002491817 - [CVE-2025-43009] Missing Authorization check in SAP Service Parts Management (SPM) (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.3] [CVE-2025-43009]  LO-SPM-OUT - Note 0002491817 exists" id="0002491817" operator="check_note">
      <compliant>NOTE = '0002491817' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.3] [CVE-2025-43009]  LO-SPM-OUT - Note 0002491817 missing and solution with SP available" id="0002491817" operator="check_note:0002491817">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 100 SAPK-10006INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 101 SAPK-10104INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 102 SAPK-10201INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_APPL 600 SAPKH60030 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_APPL 602 SAPKH60220 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- SAP_APPL 603 SAPKH60319 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_APPL 604 SAPKH60420 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_APPL 605 SAPKH60517 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_APPL 606 SAPKH60620 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '616' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_APPL 616 SAPKH61612 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_APPL 617 SAPKH61715 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_APPL 618 SAPK-61809INSAPAPPL -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 100 SAPK-10006INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 101 SAPK-10104INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 102 SAPK-10201INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_APPL 600 SAPKH60030 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_APPL 602 SAPKH60220 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- SAP_APPL 603 SAPKH60319 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_APPL 604 SAPKH60420 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_APPL 605 SAPKH60517 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_APPL 606 SAPKH60620 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '616' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_APPL 616 SAPKH61612 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_APPL 617 SAPKH61715 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_APPL 618 SAPK-61809INSAPAPPL -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.3] [CVE-2025-43009]  LO-SPM-OUT - Note 0002491817 missing and applicable using Correction Instruction" id="0002491817" operator="check_note:0002491817">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 100 100 - SAPK-10005INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 101 101 - SAPK-10103INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CORE 102 102 - 102 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- SAP_APPL 600 SAPKH60001 - SAPKH60029  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '602' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_APPL 602 602 - SAPKH60219 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- SAP_APPL 603 603 - SAPKH60318 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '604' and lpad(SP,4,'0') between '0001' and '0019' )  
        <!-- SAP_APPL 604 SAPKH60401 - SAPKH60419 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '605' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_APPL 605 605 - SAPKH60516 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and lpad(SP,4,'0') between '0001' and '0019' )  
        <!-- SAP_APPL 606 SAPKH60601 - SAPKH60619 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '616' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_APPL 616 616 - SAPKH61611 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0014' )  
        <!-- SAP_APPL 617 SAPKH61701 - SAPKH61714 manual -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_APPL 618 618 - SAPK-61808INSAPAPPL manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.3] LO-SPM-X 0002719724 - [CVE-2025-43007] Missing Authorization check in SAP Service Parts Management (SPM) (Version 7) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.3] [CVE-2025-43007] LO-SPM-X - Note 0002719724 exists" id="0002719724" operator="check_note">
      <compliant>NOTE = '0002719724' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.3] [CVE-2025-43007] LO-SPM-X - Note 0002719724 missing and solution with SP available" id="0002719724" operator="check_note:0002719724">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 100 SAPK-10008INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 101 SAPK-10106INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 102 SAPK-10204INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 103 SAPK-10302INS4CORE -->
         or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_APPL 617 SAPKH61718 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_APPL 618 SAPK-61812INSAPAPPL -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 100 SAPK-10008INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 101 SAPK-10106INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 102 SAPK-10204INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 103 SAPK-10302INS4CORE -->
         or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_APPL 617 SAPKH61718 -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_APPL 618 SAPK-61812INSAPAPPL -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.3] [CVE-2025-43007] LO-SPM-X - Note 0002719724 missing and applicable using Correction Instruction" id="0002719724" operator="check_note:0002719724">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 100 100 - SAPK-10007INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 101 101 - SAPK-10105INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 102 102 - SAPK-10203INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 103 103 - SAPK-10301INS4CORE  -->
         or
      ( COMPONENT = 'SAP_APPL' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0017' )  
        <!-- SAP_APPL 617 SAPKH61701 - SAPKH61717  -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_APPL 618 618 - SAPK-61811INSAPAPPL manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.2] BC-MID-RFC 0003577287 - [CVE-2025-31329] Information Disclosure vulnerability in SAP NetWeaver Application Server ABAP and  ABAP Platform (Version 4) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.2] [CVE-2025-31329] BC-MID-RFC - Note 0003577287 exists" id="0003577287" operator="check_note">
      <compliant>NOTE = '0003577287' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.2] [CVE-2025-31329] BC-MID-RFC - Note 0003577287 missing and solution with SP available" id="0003577287" operator="check_note:0003577287">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_BASIS 751 SAPK-75120INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 752 SAPK-75216INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.2] [CVE-2025-31329] BC-MID-RFC - Note 0003577287 missing and applicable using Correction Instruction" id="0003577287" operator="check_note:0003577287">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0040' and '0999' )  
        <!-- SAP_BASIS 700 SAPKB70040 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0025' and '0999' )  
        <!-- SAP_BASIS 701 SAPKB70125 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0025' and '0999' )  
        <!-- SAP_BASIS 702 SAPKB70225 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0032' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73132 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0029' and '0999' )  
        <!-- SAP_BASIS 740 SAPKB74029 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0026' and '0032' )  
        <!-- SAP_BASIS 750 SAPK-75026INSAPBASIS - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0007' and '0999' )  
        <!-- SAP_BASIS 751 SAPK-75107INSAPBASIS - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_BASIS 752 SAPK-75201INSAPBASIS - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BASIS 753 753 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0007' and '0999' )  
        <!-- SAP_BASIS 754 SAPK-75407INSAPBASIS - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0005' and '0009' )  
        <!-- SAP_BASIS 755 SAPK-75505INSAPBASIS - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0003' and '0999' )  
        <!-- SAP_BASIS 756 SAPK-75603INSAPBASIS - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BASIS 757 757 - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.8] PY-PT 0003585992 - [CVE-2025-43008] Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (Version 3) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.8 ] [CVE-2025-43008] PY-PT - Note 0003585992 exists" id="0003585992" operator="check_note">
      <compliant>NOTE = '0003585992' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8 ] [CVE-2025-43008] PY-PT - Note 0003585992 missing and solution with SP available" id="0003585992" operator="check_note:0003585992">
      <compliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- S4HCMCPT 100 SAPK-10035INS4HCMCPT -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- S4HCMCPT 101 SAPK-10122INS4HCMCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0252' )   ) 
        <!-- SAP_HRCPT 600 SAPK-600P2INSAPHRCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0218' )   ) 
        <!-- SAP_HRCPT 604 SAPK-604L8INSAPHRCPT -->
         or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and not( (lpad(SP,4,'0'))  &lt; '0146' )   ) 
        <!-- SAP_HRCPT 608 SAPK-608E6INSAPHRCPT -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- S4HCMCPT 100 SAPK-10035INS4HCMCPT -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- S4HCMCPT 101 SAPK-10122INS4HCMCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0252' )  
        <!-- SAP_HRCPT 600 SAPK-600P2INSAPHRCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0218' )  
        <!-- SAP_HRCPT 604 SAPK-604L8INSAPHRCPT -->
         or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and (lpad(SP,4,'0'))  &lt; '0146' )  
        <!-- SAP_HRCPT 608 SAPK-608E6INSAPHRCPT -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8 ] [CVE-2025-43008] PY-PT - Note 0003585992 missing and applicable using Correction Instruction" id="0003585992" operator="check_note:0003585992">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and lpad(SP,4,'0') between '0008' and '0034' )  
        <!-- S4HCMCPT 100 SAPK-10008INS4HCMCPT - SAPK-10034INS4HCMCPT  -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- S4HCMCPT 101 101 - SAPK-10121INS4HCMCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and lpad(SP,4,'0') between '0225' and '0251' )  
        <!-- SAP_HRCPT 600 SAPK-600M5INSAPHRCPT - SAPK-600P1INSAPHRCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and lpad(SP,4,'0') between '0191' and '0217' )  
        <!-- SAP_HRCPT 604 SAPK-604J1INSAPHRCPT - SAPK-604L7INSAPHRCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and lpad(SP,4,'0') between '0119' and '0145' )  
        <!-- SAP_HRCPT 608 SAPK-608B9INSAPHRCPT - SAPK-608E5INSAPHRCPT manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.6] PA-FIO-LSO 0003446649 - [CVE-2025-31328] Cross-Site Request Forgery (CSRF) vulnerability in SAP S/4 HANA (Learning Solution) (Version 8) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.6] [CVE-2025-31328] PA-FIO-LSO - Note 0003446649 exists" id="0003446649" operator="check_note">
      <compliant>NOTE = '0003446649' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.6] [CVE-2025-31328] PA-FIO-LSO - Note 0003446649 missing and solution with SP available" id="0003446649" operator="check_note:0003446649">
      <compliant>(
      ( COMPONENT = 'S4HCMGXX' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- S4HCMGXX 100 SAPK-10020INS4HCMGXX -->
          or
      ( COMPONENT = 'S4HCMGXX' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4HCMGXX 101 SAPK-10107INS4HCMGXX -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4HCMGXX' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- S4HCMGXX 100 SAPK-10020INS4HCMGXX -->
          or
      ( COMPONENT = 'S4HCMGXX' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4HCMGXX 101 SAPK-10107INS4HCMGXX -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.6] [CVE-2025-31328] PA-FIO-LSO - Note 0003446649 missing and applicable using Correction Instruction" id="0003446649" operator="check_note:0003446649">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4HCMGXX' and VERSION = '100' and lpad(SP,4,'0') between '0002' and '0019' )  
        <!-- S4HCMGXX 100 SAPK-10002INS4HCMGXX - SAPK-10019INS4HCMGXX  -->
          or
      ( COMPONENT = 'S4HCMGXX' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4HCMGXX 101 101 - SAPK-10106INS4HCMGXX  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] CA-FL-SRV 0003359825 - [CVE-2025-31327] OData meta-data property entity tampering in SAP Field Logistics (Version 9) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31327] CA-FL-SRV - Note 0003359825 exists" id="0003359825" operator="check_note">
      <compliant>NOTE = '0003359825' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31327] CA-FL-SRV - Note 0003359825 missing and solution with SP available" id="0003359825" operator="check_note:0003359825">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 107 SAPK-10703INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 107 SAPK-10703INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 108 SAPK-10801INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31327] CA-FL-SRV - Note 0003359825 missing and applicable using Correction Instruction" id="0003359825" operator="check_note:0003359825">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 107 107 - SAPK-10702INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CORE 108 108 - 108  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] MM-PUR-SVC-SES 0003227940 - [CVE-2025-43002] Missing Authorization check in SAP S4/HANA (OData meta-data property) (Version 6) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-43002] MM-PUR-SVC-SES - Note 0003227940 exists" id="0003227940" operator="check_note">
      <compliant>NOTE = '0003227940' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-43002] MM-PUR-SVC-SES - Note 0003227940 missing and solution with SP available" id="0003227940" operator="check_note:0003227940">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 102 SAPK-10211INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 103 SAPK-10309INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 104 SAPK-10407INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 105 SAPK-10505INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 106 SAPK-10603INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 102 SAPK-10211INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 103 SAPK-10309INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 104 SAPK-10407INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 105 SAPK-10505INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 106 SAPK-10603INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-43002] MM-PUR-SVC-SES - Note 0003227940 missing and applicable using Correction Instruction" id="0003227940" operator="check_note:0003227940">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 102 102 - SAPK-10210INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 103 103 - SAPK-10308INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 104 104 - SAPK-10406INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 105 105 - SAPK-10504INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 106 106 - SAPK-10602INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p1-CVSS 9.6] [CVE-2025-42989] BC-MID-RFC-QT - Kernel patch required for SNote 3600840v9" id="0003600840_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0413'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0413'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.6] [CVE-2025-42989] BC-MID-RFC-QT - Kernel patch required for SNote 3600840v9" id="0003600840_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0310'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0310'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.6] [CVE-2025-42989] BC-MID-RFC-QT - Kernel patch required for SNote 3600840v9" id="0003600840_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0030'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0030'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.6] [CVE-2025-42989] BC-MID-RFC-QT - Kernel patch required for SNote 3600840v9" id="0003600840_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0015'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0015'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH-->
  <!--ABAP-->
  <!-- [p2-CVSS 8.8] GRC-ACP 0003609271 - [CVE-2025-42982] Information Disclosure in SAP GRC (AC Plugin) (Version 7) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.8] [CVE-2025-42982] GRC-ACP - Note 0003609271 exists" id="0003609271" operator="check_note">
      <compliant>NOTE = '0003609271' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.8] [CVE-2025-42982] GRC-ACP - Note 0003609271 missing and solution with SP available" id="0003609271" operator="check_note:0003609271">
      <compliant>(
      ( COMPONENT = 'GRCPINW' and VERSION = 'V1100_700' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- GRCPINW V1100_700 SAPK-11328INGRCPINW -->
          or
      ( COMPONENT = 'GRCPINW' and VERSION = 'V1100_731' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- GRCPINW V1100_731 SAPK-11529INGRCPINW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'GRCPINW' and VERSION = 'V1100_700' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- GRCPINW V1100_700 SAPK-11328INGRCPINW -->
          or
      ( COMPONENT = 'GRCPINW' and VERSION = 'V1100_731' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- GRCPINW V1100_731 SAPK-11529INGRCPINW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.8] [CVE-2025-42982] GRC-ACP - Note 0003609271 missing and applicable using Correction Instruction" id="0003609271" operator="check_note:0003609271">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'GRCPINW' and VERSION = 'V1100_700' and lpad(SP,4,'0') between '0004' and '0027' )  
        <!-- GRCPINW V1100_700 SAPK-11304INGRCPINW - SAPK-11327INGRCPINW  -->
          or
      ( COMPONENT = 'GRCPINW' and VERSION = 'V1100_731' and lpad(SP,4,'0') between '0004' and '0028' )  
        <!-- GRCPINW V1100_731 SAPK-11504INGRCPINW - SAPK-11528INGRCPINW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 8.5] CRM-MW 0003606484 - [CVE-2025-42983] Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-42983] CRM-MW Note 0003606484 exists" id="0003606484" operator="check_note">
      <compliant>NOTE = '0003606484' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-42983] CRM-MW Note 0003606484 missing and solution with SP available" id="0003606484" operator="check_note:0003606484">
      <compliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- PI_BASIS 2006_1_700 SAPKIPYM33 -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- PI_BASIS 701 SAPK-70128INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- PI_BASIS 702 SAPK-70228INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- PI_BASIS 731 SAPK-73137INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- PI_BASIS 740 SAPK-74034INPIBASIS -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BW 758 SAPK-75804INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 914 SAPK-91411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '915' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BW 915 SAPK-91504INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- PI_BASIS 2006_1_700 SAPKIPYM33 -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- PI_BASIS 701 SAPK-70128INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- PI_BASIS 702 SAPK-70228INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- PI_BASIS 731 SAPK-73137INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- PI_BASIS 740 SAPK-74034INPIBASIS -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BW 758 SAPK-75804INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 914 SAPK-91411INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '915' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BW 915 SAPK-91504INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.5] [CVE-2025-42983] CRM-MW Note 0003606484 missing and applicable using Correction Instruction" id="0003606484" operator="check_note:0003606484">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- PI_BASIS 2006_1_700 2006_1_700 - SAPKIPYM32  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- PI_BASIS 701 701 - SAPK-70127INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- PI_BASIS 702 SAPK-70201INPIBASIS - SAPK-70227INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- PI_BASIS 731 SAPK-73101INPIBASIS - SAPK-73136INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- PI_BASIS 740 740 - SAPK-74033INPIBASIS  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BW 750 750 - SAPK-75032INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BW 758 758 - SAPK-75803INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7] 0003591978 CA-LT-PCL - [CVE-2025-43011] Missing Authorization Check in SAP Landscape Transformation (PCL Basis) (Version 9)-->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-43011] CA-LT-PCL Note 0003591978 exists" id="0003591978" operator="check_note">
      <compliant>NOTE = '0003591978' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-43011] CA-LT-PCL Note 0003591978 missing and solution with SP available" id="0003591978" operator="check_note:0003591978">
      <compliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- DMIS 2018_1_752 SAPK-20114INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- DMIS 2020 SAPK-20210INDMIS -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_700 SAPK-11328INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_710 SAPK-11428INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_730 SAPK-11528INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- DMIS 2011_1_731 SAPK-11628INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- DMIS 2018_1_752 SAPK-20114INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- DMIS 2020 SAPK-20210INDMIS -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- S4CORE 102 SAPK-10216INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- S4CORE 103 SAPK-10314INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-43011] CA-LT-PCL Note 0003591978 missing and applicable using Correction Instruction" id="0003591978" operator="check_note:0003591978">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and lpad(SP,4,'0') between '0013' and '0027' )  
        <!-- DMIS 2011_1_700 SAPK-11313INDMIS - SAPK-11327INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and lpad(SP,4,'0') between '0013' and '0027' )  
        <!-- DMIS 2011_1_710 SAPK-11413INDMIS - SAPK-11427INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and lpad(SP,4,'0') between '0013' and '0027' )  
        <!-- DMIS 2011_1_730 SAPK-11513INDMIS - SAPK-11527INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and lpad(SP,4,'0') between '0013' and '0027' )  
        <!-- DMIS 2011_1_731 SAPK-11613INDMIS - SAPK-11627INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- DMIS 2018_1_752 2018_1_752 - SAPK-20113INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- DMIS 2020 2020 - SAPK-20209INDMIS  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4CORE 102 102 - SAPK-10215INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 103 103 - SAPK-10313INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 104 104 - SAPK-10411INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM-->
  <!--ABAP-->
  <!-- [p3-CVSS 6.7]  0003580384 OPU-XBE - [CVE-2025-42993] Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) (Version 6)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 exists" id="0003580384" operator="check_note">
      <compliant>NOTE = '0003580384' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 missing and solution with SP available" id="0003580384" operator="check_note:0003580384">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 missing and applicable using Correction Instruction" id="0003580384" operator="check_note:0003580384">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
    )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.8]  0003590887 BC-ABA-LA - [CVE-2025-31325] Cross-Site Scripting (XSS) Vulnerability in SAP NetWeaver (ABAP Keyword Documentation) (Version 11)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-31325] BC-ABA-LA - Note 0003590887 exists" id="0003590887" operator="check_note">
      <compliant>NOTE = '0003590887' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-31325] BC-ABA-LA - Note 0003590887 missing and solution with SP available" id="0003590887" operator="check_note:0003590887">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-31325] BC-ABA-LA - Note 0003590887 missing and applicable using Correction Instruction" id="0003590887" operator="check_note:0003590887">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_BASIS 758 758 - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.8]  0003585992 PY-PT - [CVE-2025-43008] Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (Version 3)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-43008] PY-PT - Note 0003585992 exists" id="0003585992" operator="check_note">
      <compliant>NOTE = '0003585992' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-43008] PY-PT - Note 0003585992 missing and solution with SP available" id="0003585992" operator="check_note:0003585992">
      <compliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- S4HCMCPT 100 SAPK-10035INS4HCMCPT -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- S4HCMCPT 101 SAPK-10122INS4HCMCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0252' )   ) 
        <!-- SAP_HRCPT 600 SAPK-600P2INSAPHRCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0218' )   ) 
        <!-- SAP_HRCPT 604 SAPK-604L8INSAPHRCPT -->
         or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and not( (lpad(SP,4,'0'))  &lt; '0146' )   ) 
        <!-- SAP_HRCPT 608 SAPK-608E6INSAPHRCPT -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- S4HCMCPT 100 SAPK-10035INS4HCMCPT -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- S4HCMCPT 101 SAPK-10122INS4HCMCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0252' )  
        <!-- SAP_HRCPT 600 SAPK-600P2INSAPHRCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0218' )  
        <!-- SAP_HRCPT 604 SAPK-604L8INSAPHRCPT -->
         or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and (lpad(SP,4,'0'))  &lt; '0146' )  
        <!-- SAP_HRCPT 608 SAPK-608E6INSAPHRCPT -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-43008] PY-PT - Note 0003585992 missing and applicable using Correction Instruction" id="0003585992" operator="check_note:0003585992">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and lpad(SP,4,'0') between '0008' and '0034' )  
        <!-- S4HCMCPT 100 SAPK-10008INS4HCMCPT - SAPK-10034INS4HCMCPT  -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- S4HCMCPT 101 101 - SAPK-10121INS4HCMCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and lpad(SP,4,'0') between '0225' and '0251' )  
        <!-- SAP_HRCPT 600 SAPK-600M5INSAPHRCPT - SAPK-600P1INSAPHRCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and lpad(SP,4,'0') between '0191' and '0217' )  
        <!-- SAP_HRCPT 604 SAPK-604J1INSAPHRCPT - SAPK-604L7INSAPHRCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and lpad(SP,4,'0') between '0119' and '0145' )  
        <!-- SAP_HRCPT 608 SAPK-608B9INSAPHRCPT - SAPK-608E5INSAPHRCPT  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4]  0003441087 MM-PUR-HUB-CTR - [CVE-2025-42984] Missing Authorization check in SAP S/4HANA (Manage Central Purchase Contract application) (Version 8)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42984] MM-PUR-HUB-CTR - Note 0003441087 exists" id="0003441087" operator="check_note">
      <compliant>NOTE = '0003441087' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42984] MM-PUR-HUB-CTR - Note 0003441087 missing and solution with SP available" id="0003441087" operator="check_note:0003441087">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 106 SAPK-10606INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42984] MM-PUR-HUB-CTR - Note 0003441087 missing and applicable using Correction Instruction" id="0003441087" operator="check_note:0003441087">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 106 106 - SAPK-10605INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003608058 FIN-FSCM-CLM-BAM - [CVE-2025-42991] Missing Authorization check in SAP S/4HANA (Bank Account Application) (Version 9)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42991] FIN-FSCM-CLM-BAM - Note 0003608058 exists" id="0003608058" operator="check_note">
      <compliant>NOTE = '0003608058' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42991] FIN-FSCM-CLM-BAM - Note 0003608058 missing and solution with SP available" id="0003608058" operator="check_note:0003608058">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42991] FIN-FSCM-CLM-BAM - Note 0003608058 missing and applicable using Correction Instruction" id="0003608058" operator="check_note:0003608058">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003596850 FI-FIO-AR-PAY - [CVE-2025-42987] Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statement) (Version 11)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42987] FI-FIO-AR-PAY - Note 0003596850 exists" id="0003596850" operator="check_note">
      <compliant>NOTE = '0003596850' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42987] FI-FIO-AR-PAY - Note 0003596850 missing and solution with SP available" id="0003596850" operator="check_note:0003596850">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CORE 104 SAPK-10412INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42987] FI-FIO-AR-PAY - Note 0003596850 missing and applicable using Correction Instruction" id="0003596850" operator="check_note:0003596850">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CORE 104 104 - SAPK-10411INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 105 105 - SAPK-10509INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 106 106 - SAPK-10607INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 107 107 - SAPK-10705INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO LOW-->
  <!-- [p4-CVSS 3.1]  0003426825 OPU-GW-COR - [CVE-2025-23191] Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP (Version 9)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 exists" id="0003426825" operator="check_note">
      <compliant>NOTE = '0003426825' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 missing and solution with SP available" id="0003426825" operator="check_note:0003426825">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_GWFND 740 SAPK-74033INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_GWFND 750 SAPK-75033INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_GWFND 751 SAPK-75120INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_GWFND 752 SAPK-75216INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_GWFND 753 SAPK-75314INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_GWFND 740 SAPK-74033INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_GWFND 750 SAPK-75033xINSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_GWFND 751 SAPK-75120INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_GWFND 752 SAPK-75216INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_GWFND 753 SAPK-75314INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 missing and applicable using Correction Instruction" id="0003426825" operator="check_note:0003426825">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and lpad(SP,4,'0') between '0012' and '0032' )  
        <!-- SAP_GWFND 740 SAPK-74012INSAPGWFND - SAPK-74032INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0032' )  
        <!-- SAP_GWFND 750 SAPK-75004INSAPGWFND - SAPK-75032INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_GWFND 751 751 - SAPK-75119INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and lpad(SP,4,'0') between '0011' and '0015' )  
        <!-- SAP_GWFND 752 SAPK-75211INSAPGWFND - SAPK-75215INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and lpad(SP,4,'0') between '0009' and '0013' )  
        <!-- SAP_GWFND 753 SAPK-75309INSAPGWFND - SAPK-75313INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and lpad(SP,4,'0') between '0007' and '0011' )  
        <!-- SAP_GWFND 754 SAPK-75407INSAPGWFND - SAPK-75411INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and lpad(SP,4,'0') between '0005' and '0009' )  
        <!-- SAP_GWFND 755 SAPK-75505INSAPGWFND - SAPK-75509INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and lpad(SP,4,'0') between '0003' and '0007' )  
        <!-- SAP_GWFND 756 SAPK-75603INSAPGWFND - SAPK-75607INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.0]  0003601169 CA-UI5-SC - [CVE-2025-42990] HTML Injection in Unprotected SAPUI5 applications (Version 4)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.0] [CVE-2025-42990] CA-UI5-SC - Note 0003601169 exists" id="0003601169" operator="check_note">
      <compliant>NOTE = '0003601169' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.0] [CVE-2025-42990] CA-UI5-SC - Note 0003601169 missing and applicable using Correction Instruction" id="0003601169" operator="check_note:0003601169">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_UI' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_UI 750 750 - ALL_SP manual -->
         or
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0017' )  
        <!-- SAP_UI 754 SAPK-75401INSAPUI - SAPK-75417INSAPUI manual -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and lpad(SP,4,'0') between '0001' and '0014' )  
        <!-- SAP_UI 755 SAPK-75501INSAPUI - SAPK-75514INSAPUI manual -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0011' )  
        <!-- SAP_UI 756 SAPK-75601INSAPUI - SAPK-75611INSAPUI manual -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0008' )  
        <!-- SAP_UI 757 SAPK-75701INSAPUI - SAPK-75708INSAPUI manual -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '758' and lpad(SP,4,'0') between '0001' and '0004' )  
        <!-- SAP_UI 758 SAPK-75801INSAPUI - SAPK-75804INSAPUI manual -->
          or
      ( COMPONENT = 'UI_700' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- UI_700 200 200 - ALL_SP manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42967] SCM-APO-PPS - Note 0003618955 exists" id="0003618955" operator="check_note">
      <compliant>NOTE = '0003618955' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42967] SCM-APO-PPS - Note 0003618955 missing and solution with SP available" id="0003618955" operator="check_note:0003618955">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4COREOP 105 SAPK-10511INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4COREOP 106 SAPK-10608INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4COREOP 107 SAPK-10706INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4COREOP 108 SAPK-10804INS4COREOP -->
          or
      ( COMPONENT = 'SCM' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SCM 702 SAPKY70230 -->
         or
      ( COMPONENT = 'SCMAPO' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SCMAPO 713 SAPK-71331INSCMAPO -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SCMAPO 714 SAPK-71425INSCMAPO -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4COREOP 105 SAPK-10511INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4COREOP 106 SAPK-10608INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4COREOP 107 SAPK-10706INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4COREOP 108 SAPK-10804INS4COREOP -->
          or
      ( COMPONENT = 'SCM' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SCM 702 SAPKY70230 -->
         or
      ( COMPONENT = 'SCMAPO' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SCMAPO 713 SAPK-71331INSCMAPO -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SCMAPO 714 SAPK-71425INSCMAPO -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42967] SCM-APO-PPS - Note 0003618955 missing and applicable using Correction Instruction" id="0003618955" operator="check_note:0003618955">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- S4CORE 102 102 - SAPK-10216INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 103 103 - SAPK-10314INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4COREOP 105 105 - SAPK-10510INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4COREOP 106 106 - SAPK-10607INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4COREOP 107 107 - SAPK-10705INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4COREOP 108 108 - SAPK-10803INS4COREOP  -->
          or
      ( COMPONENT = 'SCM' and VERSION = '700' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SCM 700 SAPKY70001 - ALL_SP  -->
         or
      ( COMPONENT = 'SCM' and VERSION = '701' and lpad(SP,4,'0') between '0004' and '0999' )  
        <!-- SCM 701 SAPKY70104 - ALL_SP  -->
          or
      ( COMPONENT = 'SCM' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- SCM 702 SAPKY70201 - SAPKY70229  -->
          or
      ( COMPONENT = 'SCM' and VERSION = '712' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SCM 712 712 - ALL_SP  -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0030' )  
        <!-- SCMAPO 713 SAPK-71301INSCMAPO - SAPK-71330INSCMAPO  -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- SCMAPO 714 SAPK-71401INSCMAPO - SAPK-71424INSCMAPO  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH-->
  <!-- [p2-CVSS 8.1]  0003623440 BC-CCM-CNF-OPM - [CVE-2025-42953] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42953] BC-CCM-CNF-OPM - Note 0003623440 exists" id="0003623440" operator="check_note">
      <compliant>NOTE = '0003623440' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42953] BC-CCM-CNF-OPM - Note 0003623440 missing and solution with SP available" id="0003623440" operator="check_note:0003623440">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42953] BC-CCM-CNF-OPM - Note 0003623440 missing and applicable using Correction Instruction" id="0003623440" operator="check_note:0003623440">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7]  0003623255 CRM-MW-ADP - [CVE-2025-42952] Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-42952] CRM-MW-ADP - Note 0003623255 exists" id="0003623255" operator="check_note">
      <compliant>NOTE = '0003623255' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-42952] CRM-MW-ADP - Note 0003623255 missing and solution with SP available" id="0003623255" operator="check_note:0003623255">
      <compliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- PI_BASIS 2006_1_700 SAPKIPYM33 -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- PI_BASIS 701 SAPK-70128INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- PI_BASIS 702 SAPK-70228INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- PI_BASIS 731 SAPK-73137INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- PI_BASIS 740 SAPK-74034INPIBASIS -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- PI_BASIS 2006_1_700 SAPKIPYM33 -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- PI_BASIS 701 SAPK-70128INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- PI_BASIS 702 SAPK-70228INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- PI_BASIS 731 SAPK-73137INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- PI_BASIS 740 SAPK-74034INPIBASIS -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-42952] CRM-MW-ADP - Note 0003623255 missing and applicable using Correction Instruction" id="0003623255" operator="check_note:0003623255">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- PI_BASIS 2006_1_700 2006_1_700 - SAPKIPYM32  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- PI_BASIS 701 701 - SAPK-70127INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- PI_BASIS 702 SAPK-70201INPIBASIS - SAPK-70227INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- PI_BASIS 731 SAPK-73101INPIBASIS - SAPK-73136INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- PI_BASIS 740 740 - SAPK-74033INPIBASIS  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM -->
  <!-- [p3-CVSS 6.7]  0003580384 OPU-XBE - [CVE-2025-42993] Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) (Version 8) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 exists" id="0003580384" operator="check_note">
      <compliant>NOTE = '0003580384' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 missing and solution with SP available" id="0003580384" operator="check_note:0003580384">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 missing and applicable using Correction Instruction" id="0003580384" operator="check_note:0003580384">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.6]  0003577300 OPU-GW-V4 - [CVE-2025-42997] Information Disclosure vulnerability in SAP Gateway Client (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 exists" id="0003577300" operator="check_note">
      <compliant>NOTE = '0003577300' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 missing and solution with SP available" id="0003577300" operator="check_note:0003577300">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_GWFND 752 SAPK-75217INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_GWFND 753 SAPK-75315INSAPGWFND -->
         or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_GWFND 752 SAPK-75217INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_GWFND 753 SAPK-75315INSAPGWFND -->
         or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 missing and applicable using Correction Instruction" id="0003577300" operator="check_note:0003577300">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0016' )  
        <!-- SAP_GWFND 752 SAPK-75210INSAPGWFND - SAPK-75216INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and lpad(SP,4,'0') between '0008' and '0014' )  
        <!-- SAP_GWFND 753 SAPK-75308INSAPGWFND - SAPK-75314INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and lpad(SP,4,'0') between '0006' and '0011' )  
        <!-- SAP_GWFND 754 SAPK-75406INSAPGWFND - SAPK-75411INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and lpad(SP,4,'0') between '0004' and '0009' )  
        <!-- SAP_GWFND 755 SAPK-75504INSAPGWFND - SAPK-75509INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and lpad(SP,4,'0') between '0002' and '0007' )  
        <!-- SAP_GWFND 756 SAPK-75602INSAPGWFND - SAPK-75607INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003617131 BC-FES-ITS - [CVE-2025-42981] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (Version 10) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 exists" id="0003617131" operator="check_note">
      <compliant>NOTE = '0003617131' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 missing and solution with SP available" id="0003617131" operator="check_note:0003617131">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 missing and applicable using Correction Instruction" id="0003617131" operator="check_note:0003617131">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 750 750 - SAPK-75032INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816 manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003604212 BW-BEX-ET-WEB - [CVE-2025-42962] Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation) (Version 7) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42962] BW-BEX-ET-WEB - Note 0003604212 exists" id="0003604212" operator="check_note">
      <compliant>NOTE = '0003604212' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42962] BW-BEX-ET-WEB - Note 0003604212 missing and solution with SP available" id="0003604212" operator="check_note:0003604212">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- DW4CORE 200 SAPK-20018INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- DW4CORE 200 SAPK-20018INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42962] BW-BEX-ET-WEB - Note 0003604212 missing and applicable using Correction Instruction" id="0003604212" operator="check_note:0003604212">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- DW4CORE 200 200 - SAPK-20017INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '730' and lpad(SP,4,'0') between '0010' and '0999' )  
        <!-- SAP_BW 730 SAPKW73010 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0023' and '0036' )  
        <!-- SAP_BW 731 SAPKW73123 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0020' and '0033' )  
        <!-- SAP_BW 740 SAPKW74020 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0032' )  
        <!-- SAP_BW 750 SAPK-75004INSAPBW - SAPK-75032INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0006' and '0020' )  
        <!-- SAP_BW 751 SAPK-75106INSAPBW - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0002' and '0016' )  
        <!-- SAP_BW 752 SAPK-75202INSAPBW - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003617380 BI-RA-CR - [CVE-2025-42985] Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42985] BI-RA-CR - Note 0003617380 exists" id="0003617380" operator="check_note">
      <compliant>NOTE = '0003617380' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42985] BI-RA-CR - Note 0003617380 missing and solution with SP available" id="0003617380" operator="check_note:0003617380">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0045' )   ) 
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0081' )   ) 
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0045' )  
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0081' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42985] BI-RA-CR - Note 0003617380 missing and applicable using Correction Instruction" id="0003617380" operator="check_note:0003617380">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- DW4CORE 200 200 - SAPK-20018INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0032' and '0044' )  
        <!-- SAP_BW 700 SAPKW70032 - SAPKW70044  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BW 701 SAPKW70115 - SAPKW70127  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0014' and '0027' )  
        <!-- SAP_BW 702 SAPKW70214 - SAPKW70227  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 740 740 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BW 757 757 - SAPK-75705INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and lpad(SP,4,'0') between '0041' and '0080' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70141INVCBWTECH - SAPK-70180INVCBWTECH  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003596987 BC-MID-AC - [CVE-2025-42969] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 exists" id="0003596987" operator="check_note">
      <compliant>NOTE = '0003596987' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 missing and solution with SP available" id="0003596987" operator="check_note:0003596987">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 missing and applicable using Correction Instruction" id="0003596987" operator="check_note:0003596987">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0025' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74025 - SAPKB74033  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0023' and '0032' )  
        <!-- SAP_BASIS 750 SAPK-75023INSAPBASIS - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0014' and '0020' )  
        <!-- SAP_BASIS 751 SAPK-75114INSAPBASIS - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0016' )  
        <!-- SAP_BASIS 752 SAPK-75210INSAPBASIS - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0005' and '0014' )  
        <!-- SAP_BASIS 753 SAPK-75305INSAPBASIS - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0012' )  
        <!-- SAP_BASIS 754 SAPK-75401INSAPBASIS - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.0]  0003621037 SV-SMG-MON-REP - [CVE-2025-42968] Missing Authorization check in SAP NetWeaver (RFC enabled function module) (Version 2) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42968]  SV-SMG-MON-REP - Note 0003621037 exists" id="0003621037" operator="check_note">
      <compliant>NOTE = '0003621037' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42968]  SV-SMG-MON-REP - Note 0003621037 missing and solution with SP available" id="0003621037" operator="check_note:0003621037">
      <compliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42968]  SV-SMG-MON-REP - Note 0003621037 missing and applicable using Correction Instruction" id="0003621037" operator="check_note:0003621037">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0999' )  
        <!-- SAP_BW 700 SAPKW70004 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BW 701 701 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_BW 702 SAPKW70201 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '710' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BW 710 710 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_BW 731 SAPKW73101 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BW 740 740 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.9]  0003610322 BC-DB-DBI - [CVE-2025-42961] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 exists" id="0003610322" operator="check_note">
      <compliant>NOTE = '0003610322' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 missing and solution with SP available" id="0003610322" operator="check_note:0003610322">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 missing and applicable using Correction Instruction" id="0003610322" operator="check_note:0003610322">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0020' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70020 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70115 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0002' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70202 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0018' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74018 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 750 750 - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003610056 SV-SMG-SDD - [CVE-2025-42974] Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42974] SV-SMG-SDD - Note 0003610056 exists" id="0003610056" operator="check_note">
      <compliant>NOTE = '0003610056' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42974] SV-SMG-SDD - Note 0003610056 missing and solution with SP available" id="0003610056" operator="check_note:0003610056">
      <compliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and not( (lpad(SP,4,'0'))  &lt; '0040' )   ) 
        <!-- ST-PI 2008_1_700 SAPK-70040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and not( (lpad(SP,4,'0'))  &lt; '0040' )   ) 
        <!-- ST-PI 2008_1_710 SAPK-71040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and (lpad(SP,4,'0'))  &lt; '0040' )  
        <!-- ST-PI 2008_1_700 SAPK-70040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and (lpad(SP,4,'0'))  &lt; '0040' )  
        <!-- ST-PI 2008_1_710 SAPK-71040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42974] SV-SMG-SDD - Note 0003610056 missing and applicable using Correction Instruction" id="0003610056" operator="check_note:0003610056">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_700 2008_1_700 - SAPK-70040INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_710 2008_1_710 - SAPK-71040INSTPI  -->
         or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- ST-PI 740 740 - SAPK-74031INSTPI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003608991 BW-BEX-ET - [CVE-2025-42960] Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42960] BW-BEX-ET - Note 0003608991 exists" id="0003608991" operator="check_note">
      <compliant>NOTE = '0003608991' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42960] BW-BEX-ET - Note 0003608991 missing and solution with SP available" id="0003608991" operator="check_note:0003608991">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0045' )   ) 
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0081' )   ) 
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0045' )  
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0081' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42960] BW-BEX-ET - Note 0003608991 missing and applicable using Correction Instruction" id="0003608991" operator="check_note:0003608991">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- DW4CORE 200 200 - SAPK-20018INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0019' and '0044' )  
        <!-- SAP_BW 700 SAPKW70019 - SAPKW70044  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BW 701 701 - SAPKW70127  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BW 702 702 - SAPKW70227  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0007' and '0036' )  
        <!-- SAP_BW 731 SAPKW73107 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0005' and '0033' )  
        <!-- SAP_BW 740 SAPKW74005 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0080' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 701 - SAPK-70180INVCBWTECH  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003626440 SV-SMG-SDD - [CVE-2025-42986] Missing Authorization check in SAP NetWeaver and ABAP Platform (Version 10) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42986] SV-SMG-SDD - Note 0003626440 exists" id="0003626440" operator="check_note">
      <compliant>NOTE = '0003626440' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42986] SV-SMG-SDD - Note 0003626440 missing and solution with SP available" id="0003626440" operator="check_note:0003626440">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42986] SV-SMG-SDD - Note 0003626440 missing and applicable using Correction Instruction" id="0003626440" operator="check_note:0003626440">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO LOW -->
  <!-- [p4-CVSS 2.7] BW-BEX-ET 0003608156 - [CVE-2025-42954] Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application). (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42954]  BW-BEX-ET - Note 0003608156 exists" id="0003608156" operator="check_note">
      <compliant>NOTE = '0003608156' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42954]  BW-BEX-ET - Note 0003608156 missing and solution with SP available" id="0003608156" operator="check_note:0003608156">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0045' )   ) 
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0081' )   ) 
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0045' )  
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0081' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42954]  BW-BEX-ET - Note 0003608156 missing and applicable using Correction Instruction" id="0003608156" operator="check_note:0003608156">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- DW4CORE 200 200 - SAPK-20018INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0032' and '0044' )  
        <!-- SAP_BW 700 SAPKW70032 - SAPKW70044  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BW 701 SAPKW70115 - SAPKW70127  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BW 702 SAPKW70215 - SAPKW70227  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 740 740 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and lpad(SP,4,'0') between '0042' and '0080' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70142INVCBWTECH - SAPK-70180INVCBWTECH  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42967] SCM-APO-PPS - Note 0003618955 exists" id="0003618955" operator="check_note">
      <compliant>NOTE = '0003618955' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42967] SCM-APO-PPS - Note 0003618955 missing and solution with SP available" id="0003618955" operator="check_note:0003618955">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4COREOP 105 SAPK-10511INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4COREOP 106 SAPK-10608INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4COREOP 107 SAPK-10706INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4COREOP 108 SAPK-10804INS4COREOP -->
          or
      ( COMPONENT = 'SCM' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SCM 702 SAPKY70230 -->
         or
      ( COMPONENT = 'SCMAPO' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SCMAPO 713 SAPK-71331INSCMAPO -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SCMAPO 714 SAPK-71425INSCMAPO -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4COREOP 105 SAPK-10511INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4COREOP 106 SAPK-10608INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4COREOP 107 SAPK-10706INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4COREOP 108 SAPK-10804INS4COREOP -->
          or
      ( COMPONENT = 'SCM' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SCM 702 SAPKY70230 -->
         or
      ( COMPONENT = 'SCMAPO' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SCMAPO 713 SAPK-71331INSCMAPO -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SCMAPO 714 SAPK-71425INSCMAPO -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42967] SCM-APO-PPS - Note 0003618955 missing and applicable using Correction Instruction" id="0003618955" operator="check_note:0003618955">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- S4CORE 102 102 - SAPK-10216INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 103 103 - SAPK-10314INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4COREOP 105 105 - SAPK-10510INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4COREOP 106 106 - SAPK-10607INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4COREOP 107 107 - SAPK-10705INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4COREOP 108 108 - SAPK-10803INS4COREOP  -->
          or
      ( COMPONENT = 'SCM' and VERSION = '700' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SCM 700 SAPKY70001 - ALL_SP  -->
         or
      ( COMPONENT = 'SCM' and VERSION = '701' and lpad(SP,4,'0') between '0004' and '0999' )  
        <!-- SCM 701 SAPKY70104 - ALL_SP  -->
          or
      ( COMPONENT = 'SCM' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- SCM 702 SAPKY70201 - SAPKY70229  -->
          or
      ( COMPONENT = 'SCM' and VERSION = '712' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SCM 712 712 - ALL_SP  -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0030' )  
        <!-- SCMAPO 713 SAPK-71301INSCMAPO - SAPK-71330INSCMAPO  -->
          or
      ( COMPONENT = 'SCMAPO' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- SCMAPO 714 SAPK-71401INSCMAPO - SAPK-71424INSCMAPO  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH-->
  <!-- [p2-CVSS 8.1]  0003623440 BC-CCM-CNF-OPM - [CVE-2025-42953] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42953] BC-CCM-CNF-OPM - Note 0003623440 exists" id="0003623440" operator="check_note">
      <compliant>NOTE = '0003623440' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42953] BC-CCM-CNF-OPM - Note 0003623440 missing and solution with SP available" id="0003623440" operator="check_note:0003623440">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42953] BC-CCM-CNF-OPM - Note 0003623440 missing and applicable using Correction Instruction" id="0003623440" operator="check_note:0003623440">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7]  0003623255 CRM-MW-ADP - [CVE-2025-42952] Missing Authorization check in SAP Business Warehouse and SAP Plug-In Basis (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-42952] CRM-MW-ADP - Note 0003623255 exists" id="0003623255" operator="check_note">
      <compliant>NOTE = '0003623255' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-42952] CRM-MW-ADP - Note 0003623255 missing and solution with SP available" id="0003623255" operator="check_note:0003623255">
      <compliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- PI_BASIS 2006_1_700 SAPKIPYM33 -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- PI_BASIS 701 SAPK-70128INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- PI_BASIS 702 SAPK-70228INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- PI_BASIS 731 SAPK-73137INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- PI_BASIS 740 SAPK-74034INPIBASIS -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- PI_BASIS 2006_1_700 SAPKIPYM33 -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- PI_BASIS 701 SAPK-70128INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- PI_BASIS 702 SAPK-70228INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- PI_BASIS 731 SAPK-73137INPIBASIS -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- PI_BASIS 740 SAPK-74034INPIBASIS -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-42952] CRM-MW-ADP - Note 0003623255 missing and applicable using Correction Instruction" id="0003623255" operator="check_note:0003623255">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'PI_BASIS' and VERSION = '2006_1_700' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- PI_BASIS 2006_1_700 2006_1_700 - SAPKIPYM32  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- PI_BASIS 701 701 - SAPK-70127INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- PI_BASIS 702 SAPK-70201INPIBASIS - SAPK-70227INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- PI_BASIS 731 SAPK-73101INPIBASIS - SAPK-73136INPIBASIS  -->
          or
      ( COMPONENT = 'PI_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- PI_BASIS 740 740 - SAPK-74033INPIBASIS  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM -->
  <!-- [p3-CVSS 6.7]  0003580384 OPU-XBE - [CVE-2025-42993] Missing Authorization Check in SAP S/4HANA (Enterprise Event Enablement) (Version 8) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 exists" id="0003580384" operator="check_note">
      <compliant>NOTE = '0003580384' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 missing and solution with SP available" id="0003580384" operator="check_note:0003580384">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.7] [CVE-2025-42993] OPU-XBE - Note 0003580384 missing and applicable using Correction Instruction" id="0003580384" operator="check_note:0003580384">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.6]  0003577300 OPU-GW-V4 - [CVE-2025-42997] Information Disclosure vulnerability in SAP Gateway Client (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 exists" id="0003577300" operator="check_note">
      <compliant>NOTE = '0003577300' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 missing and solution with SP available" id="0003577300" operator="check_note:0003577300">
      <compliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_GWFND 752 SAPK-75217INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_GWFND 753 SAPK-75315INSAPGWFND -->
         or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_GWFND 752 SAPK-75217INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_GWFND 753 SAPK-75315INSAPGWFND -->
         or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42997] OPU-GW-V4 - Note 0003577300 missing and applicable using Correction Instruction" id="0003577300" operator="check_note:0003577300">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0016' )  
        <!-- SAP_GWFND 752 SAPK-75210INSAPGWFND - SAPK-75216INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and lpad(SP,4,'0') between '0008' and '0014' )  
        <!-- SAP_GWFND 753 SAPK-75308INSAPGWFND - SAPK-75314INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and lpad(SP,4,'0') between '0006' and '0011' )  
        <!-- SAP_GWFND 754 SAPK-75406INSAPGWFND - SAPK-75411INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and lpad(SP,4,'0') between '0004' and '0009' )  
        <!-- SAP_GWFND 755 SAPK-75504INSAPGWFND - SAPK-75509INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and lpad(SP,4,'0') between '0002' and '0007' )  
        <!-- SAP_GWFND 756 SAPK-75602INSAPGWFND - SAPK-75607INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - SAPK-75705INSAPGWFND  -->
          or
      ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003617131 BC-FES-ITS - [CVE-2025-42981] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (Version 10) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 exists" id="0003617131" operator="check_note">
      <compliant>NOTE = '0003617131' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 missing and solution with SP available" id="0003617131" operator="check_note:0003617131">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 missing and applicable using Correction Instruction" id="0003617131" operator="check_note:0003617131">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 750 750 - SAPK-75032INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816 manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003604212 BW-BEX-ET-WEB - [CVE-2025-42962] Cross-Site Scripting (XSS) vulnerability in SAP Business Warehouse (Business Explorer Web 3.5 loading animation) (Version 7) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42962] BW-BEX-ET-WEB - Note 0003604212 exists" id="0003604212" operator="check_note">
      <compliant>NOTE = '0003604212' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42962] BW-BEX-ET-WEB - Note 0003604212 missing and solution with SP available" id="0003604212" operator="check_note:0003604212">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- DW4CORE 200 SAPK-20018INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- DW4CORE 200 SAPK-20018INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42962] BW-BEX-ET-WEB - Note 0003604212 missing and applicable using Correction Instruction" id="0003604212" operator="check_note:0003604212">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- DW4CORE 200 200 - SAPK-20017INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '730' and lpad(SP,4,'0') between '0010' and '0999' )  
        <!-- SAP_BW 730 SAPKW73010 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0023' and '0036' )  
        <!-- SAP_BW 731 SAPKW73123 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0020' and '0033' )  
        <!-- SAP_BW 740 SAPKW74020 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0032' )  
        <!-- SAP_BW 750 SAPK-75004INSAPBW - SAPK-75032INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0006' and '0020' )  
        <!-- SAP_BW 751 SAPK-75106INSAPBW - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0002' and '0016' )  
        <!-- SAP_BW 752 SAPK-75202INSAPBW - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003617380 BI-RA-CR - [CVE-2025-42985] Open Redirect vulnerability in SAP BusinessObjects Content Administrator workbench (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42985] BI-RA-CR - Note 0003617380 exists" id="0003617380" operator="check_note">
      <compliant>NOTE = '0003617380' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42985] BI-RA-CR - Note 0003617380 missing and solution with SP available" id="0003617380" operator="check_note:0003617380">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0045' )   ) 
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0081' )   ) 
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0045' )  
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0081' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42985] BI-RA-CR - Note 0003617380 missing and applicable using Correction Instruction" id="0003617380" operator="check_note:0003617380">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- DW4CORE 200 200 - SAPK-20018INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0032' and '0044' )  
        <!-- SAP_BW 700 SAPKW70032 - SAPKW70044  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BW 701 SAPKW70115 - SAPKW70127  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0014' and '0027' )  
        <!-- SAP_BW 702 SAPKW70214 - SAPKW70227  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 740 740 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_BW 757 757 - SAPK-75705INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and lpad(SP,4,'0') between '0041' and '0080' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70141INVCBWTECH - SAPK-70180INVCBWTECH  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1]  0003596987 BC-MID-AC - [CVE-2025-42969] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 exists" id="0003596987" operator="check_note">
      <compliant>NOTE = '0003596987' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 missing and solution with SP available" id="0003596987" operator="check_note:0003596987">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 missing and applicable using Correction Instruction" id="0003596987" operator="check_note:0003596987">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0025' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74025 - SAPKB74033  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0023' and '0032' )  
        <!-- SAP_BASIS 750 SAPK-75023INSAPBASIS - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0014' and '0020' )  
        <!-- SAP_BASIS 751 SAPK-75114INSAPBASIS - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0016' )  
        <!-- SAP_BASIS 752 SAPK-75210INSAPBASIS - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0005' and '0014' )  
        <!-- SAP_BASIS 753 SAPK-75305INSAPBASIS - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0012' )  
        <!-- SAP_BASIS 754 SAPK-75401INSAPBASIS - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.0]  0003621037 SV-SMG-MON-REP - [CVE-2025-42968] Missing Authorization check in SAP NetWeaver (RFC enabled function module) (Version 2) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42968]  SV-SMG-MON-REP - Note 0003621037 exists" id="0003621037" operator="check_note">
      <compliant>NOTE = '0003621037' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42968]  SV-SMG-MON-REP - Note 0003621037 missing and solution with SP available" id="0003621037" operator="check_note:0003621037">
      <compliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42968]  SV-SMG-MON-REP - Note 0003621037 missing and applicable using Correction Instruction" id="0003621037" operator="check_note:0003621037">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0999' )  
        <!-- SAP_BW 700 SAPKW70004 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BW 701 701 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_BW 702 SAPKW70201 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '710' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BW 710 710 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_BW 731 SAPKW73101 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SAP_BW 740 740 - ALL_SP  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.9]  0003610322 BC-DB-DBI - [CVE-2025-42961] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 exists" id="0003610322" operator="check_note">
      <compliant>NOTE = '0003610322' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 missing and solution with SP available" id="0003610322" operator="check_note:0003610322">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 missing and applicable using Correction Instruction" id="0003610322" operator="check_note:0003610322">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0020' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70020 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70115 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0002' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70202 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0018' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74018 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 750 750 - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003610056 SV-SMG-SDD - [CVE-2025-42974] Missing Authorization Check in SAP NetWeaver and ABAP Platform (SDCCN) (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42974] SV-SMG-SDD - Note 0003610056 exists" id="0003610056" operator="check_note">
      <compliant>NOTE = '0003610056' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42974] SV-SMG-SDD - Note 0003610056 missing and solution with SP available" id="0003610056" operator="check_note:0003610056">
      <compliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and not( (lpad(SP,4,'0'))  &lt; '0040' )   ) 
        <!-- ST-PI 2008_1_700 SAPK-70040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and not( (lpad(SP,4,'0'))  &lt; '0040' )   ) 
        <!-- ST-PI 2008_1_710 SAPK-71040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and (lpad(SP,4,'0'))  &lt; '0040' )  
        <!-- ST-PI 2008_1_700 SAPK-70040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and (lpad(SP,4,'0'))  &lt; '0040' )  
        <!-- ST-PI 2008_1_710 SAPK-71040INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42974] SV-SMG-SDD - Note 0003610056 missing and applicable using Correction Instruction" id="0003610056" operator="check_note:0003610056">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_700 2008_1_700 - SAPK-70040INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_710 2008_1_710 - SAPK-71040INSTPI  -->
         or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0031' )  
        <!-- ST-PI 740 740 - SAPK-74031INSTPI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003608991 BW-BEX-ET - [CVE-2025-42960] Missing Authorization Check in SAP Business Warehouse and SAP BW/4HANA BEx Tools (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42960] BW-BEX-ET - Note 0003608991 exists" id="0003608991" operator="check_note">
      <compliant>NOTE = '0003608991' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42960] BW-BEX-ET - Note 0003608991 missing and solution with SP available" id="0003608991" operator="check_note:0003608991">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0045' )   ) 
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0081' )   ) 
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0045' )  
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0081' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42960] BW-BEX-ET - Note 0003608991 missing and applicable using Correction Instruction" id="0003608991" operator="check_note:0003608991">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- DW4CORE 200 200 - SAPK-20018INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0019' and '0044' )  
        <!-- SAP_BW 700 SAPKW70019 - SAPKW70044  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BW 701 701 - SAPKW70127  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BW 702 702 - SAPKW70227  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0007' and '0036' )  
        <!-- SAP_BW 731 SAPKW73107 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0005' and '0033' )  
        <!-- SAP_BW 740 SAPKW74005 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0080' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 701 - SAPK-70180INVCBWTECH  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3]  0003626440 SV-SMG-SDD - [CVE-2025-42986] Missing Authorization check in SAP NetWeaver and ABAP Platform (Version 10) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42986] SV-SMG-SDD - Note 0003626440 exists" id="0003626440" operator="check_note">
      <compliant>NOTE = '0003626440' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42986] SV-SMG-SDD - Note 0003626440 missing and solution with SP available" id="0003626440" operator="check_note:0003626440">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42986] SV-SMG-SDD - Note 0003626440 missing and applicable using Correction Instruction" id="0003626440" operator="check_note:0003626440">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO LOW -->
  <!-- [p4-CVSS 2.7] BW-BEX-ET 0003608156 - [CVE-2025-42954] Denial of service (DOS) in SAP NetWeaver Business Warehouse (CCAW application). (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42954]  BW-BEX-ET - Note 0003608156 exists" id="0003608156" operator="check_note">
      <compliant>NOTE = '0003608156' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42954]  BW-BEX-ET - Note 0003608156 missing and solution with SP available" id="0003608156" operator="check_note:0003608156">
      <compliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0019' )   ) 
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0045' )   ) 
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0081' )   ) 
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- DW4CORE 100 SAPK-10021INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0019' )  
        <!-- DW4CORE 200 SAPK-20019INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- DW4CORE 300 SAPK-30012INDW4CORE -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- DW4CORE 400 SAPK-40006INDW4CORE -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0045' )  
        <!-- SAP_BW 700 SAPKW70045 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 701 SAPKW70128 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BW 702 SAPKW70228 -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BW 731 SAPKW73137 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 740 SAPKW74034 -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BW 750 SAPK-75034INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0081' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70181INVCBWTECH -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42954]  BW-BEX-ET - Note 0003608156 missing and applicable using Correction Instruction" id="0003608156" operator="check_note:0003608156">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DW4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- DW4CORE 100 100 - SAPK-10020INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0018' )  
        <!-- DW4CORE 200 200 - SAPK-20018INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- DW4CORE 300 300 - SAPK-30011INDW4CORE  -->
          or
      ( COMPONENT = 'DW4CORE' and VERSION = '400' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- DW4CORE 400 400 - SAPK-40005INDW4CORE  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '700' and lpad(SP,4,'0') between '0032' and '0044' )  
        <!-- SAP_BW 700 SAPKW70032 - SAPKW70044  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BW 701 SAPKW70115 - SAPKW70127  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '702' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BW 702 SAPKW70215 - SAPKW70227  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BW 731 SAPKW73101 - SAPKW73136  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 740 740 - SAPKW74033  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BW 750 750 - SAPK-75033INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
          or
      ( COMPONENT = 'SAP_BW_VIRTUAL_COMP' and VERSION = '701' and lpad(SP,4,'0') between '0042' and '0080' )  
        <!-- SAP_BW_VIRTUAL_COMP 701 SAPK-70142INVCBWTECH - SAPK-70180INVCBWTECH  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42957] CA-DT-ANA - Note 0003627998 exists" id="0003627998" operator="check_note">
      <compliant>NOTE = '0003627998' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42957] CA-DT-ANA - Note 0003627998 missing and solution with SP available" id="0003627998" operator="check_note:0003627998">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42957] CA-DT-ANA - Note 0003627998 missing and applicable using Correction Instruction" id="0003627998" operator="check_note:0003627998">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- S4CORE 102 102 - SAPK-10216INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 103 103 - SAPK-10314INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 105 105 - SAPK-10510INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 106 106 - SAPK-10608INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 107 107 - SAPK-10706INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 108 108 - SAPK-10804INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.9] CA-LT-ANA 0003581961 - [CVE-2025-27429] Code Injection Vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (Version 6)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 exists" id="0003581961" operator="check_note">
      <compliant>NOTE = '0003581961' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 missing and solution with SP available" id="0003581961" operator="check_note:0003581961">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-27429] CA-LT-ANA - Note 0003581961 missing and applicable using Correction Instruction" id="0003581961" operator="check_note:0003581961">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- S4CORE 102 102 - SAPK-10216INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 103 103 - SAPK-10314INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 105 105 - SAPK-10510INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 106 106 - SAPK-10608INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 107 107 - SAPK-10706INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 108 108 - SAPK-10803INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.9] CA-LT-ANA 0003633838 - [CVE-2025-42950] Code Injection Vulnerability in SAP Landscape Transformation (Analysis Platform) (Version 2)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42950] CA-LT-ANA - Note 0003633838 exists" id="0003633838" operator="check_note">
      <compliant>NOTE = '0003633838' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42950] CA-LT-ANA - Note 0003633838 missing and solution with SP available" id="0003633838" operator="check_note:0003633838">
      <compliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_700 SAPK-11329INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_710 SAPK-11429INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_730 SAPK-11529INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_731 SAPK-11629INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- DMIS 2018_1_752 SAPK-20115INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- DMIS 2020 SAPK-20211INDMIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_700 SAPK-11329INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_710 SAPK-11429INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_730 SAPK-11529INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_731 SAPK-11629INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- DMIS 2018_1_752 SAPK-20115INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- DMIS 2020 SAPK-20211INDMIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42950] CA-LT-ANA - Note 0003633838 missing and applicable using Correction Instruction" id="0003633838" operator="check_note:0003633838">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- DMIS 2011_1_700 2011_1_700 - SAPK-11328INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- DMIS 2011_1_710 2011_1_710 - SAPK-11428INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- DMIS 2011_1_730 2011_1_730 - SAPK-11528INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- DMIS 2011_1_731 2011_1_731 - SAPK-11628INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- DMIS 2018_1_752 2018_1_752 - SAPK-20114INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- DMIS 2020 2020 - SAPK-20210INDMIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- ABAP -->
  <!-- [p2-CVSS 8.1] FIN-SEM-CPM 0003611184 - [CVE-2025-42976] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (BIC Document) (Version 13)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42976] FIN-SEM-CPM - Note 0003611184 exists" id="0003611184" operator="check_note">
      <compliant>NOTE = '0003611184' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42976] FIN-SEM-CPM - Note 0003611184 missing and solution with SP available" id="0003611184" operator="check_note:0003611184">
      <compliant>(
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4COREOP 104 SAPK-10412INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4COREOP 105 SAPK-10510INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4COREOP 106 SAPK-10608INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4COREOP 107 SAPK-10706INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4COREOP 108 SAPK-10804INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SEM-BW 736 SAPK-73636INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SEM-BW 747 SAPK-74731INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SEM-BW 748 SAPK-74825INSEMBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4COREOP 104 SAPK-10412INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4COREOP 105 SAPK-10510INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4COREOP 106 SAPK-10608INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4COREOP 107 SAPK-10706INS4COREOP -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4COREOP 108 SAPK-10804INS4COREOP -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SEM-BW 736 SAPK-73636INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SEM-BW 747 SAPK-74731INSEMBW -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SEM-BW 748 SAPK-74825INSEMBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42976] FIN-SEM-CPM - Note 0003611184 missing and applicable using Correction Instruction" id="0003611184" operator="check_note:0003611184">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4COREOP' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4COREOP 104 104 - SAPK-10411INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4COREOP 105 105 - SAPK-10509INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4COREOP 106 106 - SAPK-10607INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4COREOP 107 107 - SAPK-10705INS4COREOP  -->
          or
      ( COMPONENT = 'S4COREOP' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4COREOP 108 108 - SAPK-10803INS4COREOP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SEM-BW 600 SAPKGS6001 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '602' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 602 602 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 603 603 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '604' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SEM-BW 604 SAPK-60401INSEMBW - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '605' and lpad(SP,4,'0') between '0003' and '0999' )  
        <!-- SEM-BW 605 SAPK-60503INSEMBW - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '634' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 634 634 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '736' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SEM-BW 736 SAPK-73601INSEMBW - SAPK-73635INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '746' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- SEM-BW 746 746 - ALL_SP  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '747' and lpad(SP,4,'0') between '0001' and '0030' )  
        <!-- SEM-BW 747 SAPK-74701INSEMBW - SAPK-74730INSEMBW  -->
          or
      ( COMPONENT = 'SEM-BW' and VERSION = '748' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- SEM-BW 748 748 - SAPK-74824INSEMBW  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM-->
  <!--ABAP-->
  <!-- [p3-CVSS 6.9] FIN-FSCM-BNK 0003614804 - [CVE-2025-42946] Directory Traversal vulnerability in SAP S/4HANA (Bank Communication Management) (Version 7)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.9] [CVE-2025-42946] FIN-FSCM-BNK - Note 0003614804 exists" id="0003614804" operator="check_note">
      <compliant>NOTE = '0003614804' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.9] [CVE-2025-42946] FIN-FSCM-BNK - Note 0003614804 missing and solution with SP available" id="0003614804" operator="check_note:0003614804">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SAP_APPL 606 SAPKH60636 -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SAP_FIN 617 SAPK-61731INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SAP_FIN 618 SAPK-61825INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '720' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- SAP_FIN 720 SAPK-72024INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_FIN 730 SAPK-73026INSAPFIN -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 105 SAPK-10510INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 106 SAPK-10608INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 107 SAPK-10706INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 108 SAPK-10804INS4CORE -->
          or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SAP_APPL 606 SAPKH60636 -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SAP_FIN 617 SAPK-61731INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SAP_FIN 618 SAPK-61825INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '720' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- SAP_FIN 720 SAPK-72024INSAPFIN -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_FIN 730 SAPK-73026INSAPFIN -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.9] [CVE-2025-42946] FIN-FSCM-BNK - Note 0003614804 missing and applicable using Correction Instruction" id="0003614804" operator="check_note:0003614804">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- S4CORE 102 102 - SAPK-10216INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 103 103 - SAPK-10314INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 105 105 - SAPK-10510INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 106 106 - SAPK-10608INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 107 107 - SAPK-10706INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 108 108 - SAPK-10804INS4CORE  -->
         or
      ( COMPONENT = 'SAP_APPL' and VERSION = '606' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SAP_APPL 606 SAPKH60601 - SAPKH60635  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0030' )  
        <!-- SAP_FIN 617 SAPK-61701INSAPFIN - SAPK-61730INSAPFIN  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0024' )  
        <!-- SAP_FIN 618 618 - SAPK-61824INSAPFIN  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '720' and lpad(SP,4,'0') between '0000' and '0023' )  
        <!-- SAP_FIN 720 720 - SAPK-72023INSAPFIN  -->
          or
      ( COMPONENT = 'SAP_FIN' and VERSION = '730' and lpad(SP,4,'0') between '0003' and '0025' )  
        <!-- SAP_FIN 730 SAPK-73003INSAPFIN - SAPK-73025INSAPFIN  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] CRM-BF-ML 0003629871 - [CVE-2025-42948] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform (Version 7)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42948] CRM-BF-ML - Note 0003629871 exists" id="0003629871" operator="check_note">
      <compliant>NOTE = '0003629871' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42948] CRM-BF-ML - Note 0003629871 missing and solution with SP available" id="0003629871" operator="check_note:0003629871">
      <compliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- BBPCRM 713 SAPKU71326 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- BBPCRM 714 SAPK-71425INBBPCRM -->
         or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CEXT 107 SAPK-10707INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CEXT 108 SAPK-10805INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '109' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CEXT 109 SAPK-10901INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CRM 100 SAPK-10011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CRM 200 SAPK-20012INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CRM 204 SAPK-20413INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CRM 205 SAPK-20511INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CRM 206 SAPK-20609INS4CRM -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- BBPCRM 713 SAPKU71326 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- BBPCRM 714 SAPK-71425INBBPCRM -->
         or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CEXT 107 SAPK-10707INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CEXT 108 SAPK-10805INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '109' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CEXT 109 SAPK-10901INS4CEXT -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CRM 100 SAPK-10011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CRM 200 SAPK-20012INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CRM 204 SAPK-20413INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CRM 205 SAPK-20511INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CRM 206 SAPK-20609INS4CRM -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42948] CRM-BF-ML - Note 0003629871 missing and applicable using Correction Instruction" id="0003629871" operator="check_note:0003629871">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0025' )  
        <!-- BBPCRM 713 SAPKU71301 - SAPKU71325  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- BBPCRM 714 SAPK-71401INBBPCRM - SAPK-71424INBBPCRM  -->
         or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CEXT 107 107 - SAPK-10706INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CEXT 108 108 - SAPK-10804INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '109' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CEXT 109 109 - 109  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and lpad(SP,4,'0') between '0001' and '0010' )  
        <!-- S4CRM 100 SAPK-10001INS4CRM - SAPK-10010INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CRM 200 200 - SAPK-20011INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CRM 204 204 - SAPK-20412INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CRM 205 205 - SAPK-20510INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CRM 206 206 - SAPK-20608INS4CRM  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] BC-MID-ICF 0003597355 - [CVE-2025-42942] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (Version 7)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42942] BC-MID-ICF - Note 0003597355 exists" id="0003597355" operator="check_note">
      <compliant>NOTE = '0003597355' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42942] BC-MID-ICF - Note 0003597355 missing and solution with SP available" id="0003597355" operator="check_note:0003597355">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 914 SAPK-91413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '916' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 916 SAPK-91603INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 914 SAPK-91413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '916' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 916 SAPK-91603INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42942] BC-MID-ICF - Note 0003597355 missing and applicable using Correction Instruction" id="0003597355" operator="check_note:0003597355">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') = '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] BC-MID-AC 0003596987 - [CVE-2025-42969] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server ABAP and ABAP Platform (Version 9)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 exists" id="0003596987" operator="check_note">
      <compliant>NOTE = '0003596987' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 missing and solution with SP available" id="0003596987" operator="check_note:0003596987">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42969] BC-MID-AC - Note 0003596987 missing and applicable using Correction Instruction" id="0003596987" operator="check_note:0003596987">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0025' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74025 - SAPKB74033  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0023' and '0032' )  
        <!-- SAP_BASIS 750 SAPK-75023INSAPBASIS - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0014' and '0020' )  
        <!-- SAP_BASIS 751 SAPK-75114INSAPBASIS - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0010' and '0016' )  
        <!-- SAP_BASIS 752 SAPK-75210INSAPBASIS - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0005' and '0014' )  
        <!-- SAP_BASIS 753 SAPK-75305INSAPBASIS - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0012' )  
        <!-- SAP_BASIS 754 SAPK-75401INSAPBASIS - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] BC-FES-ITS 0003617131 - [CVE-2025-42981] Multiple vulnerabilities in SAP NetWeaver Application Server ABAP (Version 13)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 exists" id="0003617131" operator="check_note">
      <compliant>NOTE = '0003617131' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 missing and solution with SP available" id="0003617131" operator="check_note:0003617131">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42981] BC-FES-ITS - Note 0003617131 missing and applicable using Correction Instruction" id="0003617131" operator="check_note:0003617131">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033 manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 750 750 - SAPK-75032INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS manual -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816 manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.8] PY-PT 0003585992 - [CVE-2025-43008] Missing Authorization check in SAP S/4HANA HCM Portugal and SAP ERP HCM Portugal (Version 6)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-43008] PY-PT - Note 0003585992 exists" id="0003585992" operator="check_note">
      <compliant>NOTE = '0003585992' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-43008] PY-PT - Note 0003585992 missing and solution with SP available" id="0003585992" operator="check_note:0003585992">
      <compliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- S4HCMCPT 100 SAPK-10035INS4HCMCPT -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- S4HCMCPT 101 SAPK-10122INS4HCMCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0252' )   ) 
        <!-- SAP_HRCPT 600 SAPK-600P2INSAPHRCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0218' )   ) 
        <!-- SAP_HRCPT 604 SAPK-604L8INSAPHRCPT -->
         or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and not( (lpad(SP,4,'0'))  &lt; '0146' )   ) 
        <!-- SAP_HRCPT 608 SAPK-608E6INSAPHRCPT -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- S4HCMCPT 100 SAPK-10035INS4HCMCPT -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- S4HCMCPT 101 SAPK-10122INS4HCMCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0252' )  
        <!-- SAP_HRCPT 600 SAPK-600P2INSAPHRCPT -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0218' )  
        <!-- SAP_HRCPT 604 SAPK-604L8INSAPHRCPT -->
         or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and (lpad(SP,4,'0'))  &lt; '0146' )  
        <!-- SAP_HRCPT 608 SAPK-608E6INSAPHRCPT -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.8] [CVE-2025-43008] PY-PT - Note 0003585992 missing and applicable using Correction Instruction" id="0003585992" operator="check_note:0003585992">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4HCMCPT' and VERSION = '100' and lpad(SP,4,'0') between '0008' and '0034' )  
        <!-- S4HCMCPT 100 SAPK-10008INS4HCMCPT - SAPK-10034INS4HCMCPT  -->
          or
      ( COMPONENT = 'S4HCMCPT' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- S4HCMCPT 101 101 - SAPK-10121INS4HCMCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '600' and lpad(SP,4,'0') between '0225' and '0251' )  
        <!-- SAP_HRCPT 600 SAPK-600M5INSAPHRCPT - SAPK-600P1INSAPHRCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '604' and lpad(SP,4,'0') between '0191' and '0217' )  
        <!-- SAP_HRCPT 604 SAPK-604J1INSAPHRCPT - SAPK-604L7INSAPHRCPT  -->
          or
      ( COMPONENT = 'SAP_HRCPT' and VERSION = '608' and lpad(SP,4,'0') between '0119' and '0145' )  
        <!-- SAP_HRCPT 608 SAPK-608B9INSAPHRCPT - SAPK-608E5INSAPHRCPT  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- ABAP Kernel -->
  <!-- [p3-CVSS 6.1] BC-FES-WGU 0003585491 - [CVE-2025-42945] HTML Injection vulnerability in SAP NetWeaver Application Server ABAP (Version 9)  -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42945] BC-FES-WGU - Kernel patch required for SNote 3585491v9" id="0003585491_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1510'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1510'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42945] BC-FES-WGU - Kernel patch required for SNote 3585491v9" id="0003585491_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0610'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0610'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42945] BC-FES-WGU - Kernel patch required for SNote 3585491v9" id="0003585491_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0821'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0821'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42945] BC-FES-WGU - Kernel patch required for SNote 3585491v9" id="0003585491_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0417'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0417'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42945] BC-FES-WGU - Kernel patch required for SNote 3585491v9" id="0003585491_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0310'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0310'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.5] FI-LOC-CA-XX 0003540688 - [CVE-2025-42947] Code Injection vulnerability in SAP FICA ODN framework (Version 10)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.5] [CVE-2025-42947] FI-LOC-CA-XX - Note 0003540688 exists" id="0003540688" operator="check_note">
      <compliant>NOTE = '0003540688' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] [CVE-2025-42947] FI-LOC-CA-XX - Note 0003540688 missing and solution with SP available" id="0003540688" operator="check_note:0003540688">
      <compliant>(
      ( COMPONENT = 'FI-CA' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- FI-CA 606 SAPK-60635INFICA -->
          or
      ( COMPONENT = 'FI-CA' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- FI-CA 617 SAPK-61730INFICA -->
          or
      ( COMPONENT = 'FI-CA' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0024' )   ) 
        <!-- FI-CA 618 SAPK-61824INFICA -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 104 SAPK-10411INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 105 SAPK-10509INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 106 SAPK-10607INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
          or
      ( COMPONENT = 'SAPSCORE' and VERSION = '132' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAPSCORE 132 SAPK-13210INSAPSCORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'FI-CA' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- FI-CA 606 SAPK-60635INFICA -->
          or
      ( COMPONENT = 'FI-CA' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- FI-CA 617 SAPK-61730INFICA -->
          or
      ( COMPONENT = 'FI-CA' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0024' )  
        <!-- FI-CA 618 SAPK-61824INFICA -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 102 SAPK-10215INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 103 SAPK-10313INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 104 SAPK-10411INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 105 SAPK-10509INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 106 SAPK-10607INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 107 SAPK-10705INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- S4CORE 108 SAPK-10803INS4CORE -->
          or
      ( COMPONENT = 'SAPSCORE' and VERSION = '132' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAPSCORE 132 SAPK-13210INSAPSCORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] [CVE-2025-42947] FI-LOC-CA-XX - Note 0003540688 missing and applicable using Correction Instruction" id="0003540688" operator="check_note:0003540688">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'FI-CA' and VERSION = '606' and lpad(SP,4,'0') between '0006' and '0034' )  
        <!-- FI-CA 606 SAPK-60606INFICA - SAPK-60634INFICA  -->
          or
      ( COMPONENT = 'FI-CA' and VERSION = '616' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- FI-CA 616 SAPK-61601INFICA - ALL_SP  -->
          or
      ( COMPONENT = 'FI-CA' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- FI-CA 617 SAPK-61701INFICA - SAPK-61729INFICA  -->
          or
      ( COMPONENT = 'FI-CA' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0023' )  
        <!-- FI-CA 618 618 - SAPK-61823INFICA  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- S4CORE 102 102 - SAPK-10215INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- S4CORE 103 103 - SAPK-10313INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 104 104 - SAPK-10410INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 105 105 - SAPK-10508INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 106 106 - SAPK-10606INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 107 107 - SAPK-10704INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- S4CORE 108 108 - SAPK-10802INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4] BC-SRV-ARL-INT 0003602656 - [CVE-2025-42936] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 6)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42936] BC-SRV-ARL-INT - Note 0003602656 exists" id="0003602656" operator="check_note">
      <compliant>NOTE = '0003602656' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42936] BC-SRV-ARL-INT - Note 0003602656 missing and solution with SP available" id="0003602656" operator="check_note:0003602656">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42936] BC-SRV-ARL-INT - Note 0003602656 missing and applicable using Correction Instruction" id="0003602656" operator="check_note:0003602656">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 750 750 - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') = '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.9] BC-DWB-UTL-BRR 0003626722 - [CVE-2025-42949] Missing Authorization check in ABAP Platform (Version 0009)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42949] BC-DWB-UTL-BRR - Note 0003626722 exists" id="0003626722" operator="check_note">
      <compliant>NOTE = '0003626722' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42949] BC-DWB-UTL-BRR - Note 0003626722 missing and solution with SP available" id="0003626722" operator="check_note:0003626722">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '916' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 916 SAPK-91603INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '916' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 916 SAPK-91603INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42949] BC-DWB-UTL-BRR - Note 0003626722 missing and applicable using Correction Instruction" id="0003626722" operator="check_note:0003626722">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') = '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] CA-DMS 0003616863 - [CVE-2025-42934] CRLF Injection vulnerability in SAP S/4HANA (Supplier invoice) (Version 6)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42934] CA-DMS - Note 0003616863 exists" id="0003616863" operator="check_note">
      <compliant>NOTE = '0003616863' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42934] CA-DMS - Note 0003616863 missing and solution with SP available" id="0003616863" operator="check_note:0003616863">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 109 SAPK-10901INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 109 SAPK-10901INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42934] CA-DMS - Note 0003616863 missing and applicable using Correction Instruction" id="0003616863" operator="check_note:0003616863">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 103 103 - SAPK-10314INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 105 105 - SAPK-10510INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 106 106 - SAPK-10608INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 107 107 - SAPK-10706INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 108 108 - SAPK-10804INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and lpad(SP,4,'0') = '0000' )  
        <!-- S4CORE 109 109 - 109  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] CA-GTF-TS-GMA 0003577131 - [CVE-2025-31331] Authorization Bypass vulnerability in SAP NetWeaver (Version 10)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31331] CA-GTF-TS-GMA - Note 0003577131 exists" id="0003577131" operator="check_note">
      <compliant>NOTE = '0003577131' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31331] CA-GTF-TS-GMA - Note 0003577131 missing and solution with SP available" id="0003577131" operator="check_note:0003577131">
      <compliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_ABA 700 SAPKA70043 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_ABA 701 SAPKA70128 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_ABA 702 SAPKA70228 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_ABA 731 SAPKA73137 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_ABA 740 SAPKA74034 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_ABA 750 SAPK-75033INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_ABA 751 SAPK-75120INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_ABA 752 SAPK-75216INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_ABA 75C SAPK-75C16INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_ABA 75D SAPK-75D14INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_ABA 75E SAPK-75E12INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_ABA 75F SAPK-75F10INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_ABA 75G SAPK-75G08INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_ABA 75H SAPK-75H06INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_ABA 75I SAPK-75I04INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_ABA 816 SAPK-81601INSAPABA -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_ABA 700 SAPKA70043 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_ABA 701 SAPKA70128 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_ABA 702 SAPKA70228 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_ABA 731 SAPKA73137 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_ABA 740 SAPKA74034 -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_ABA 750 SAPK-75033INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_ABA 751 SAPK-75120INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_ABA 752 SAPK-75216INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_ABA 75C SAPK-75C16INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_ABA 75D SAPK-75D14INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_ABA 75E SAPK-75E12INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_ABA 75F SAPK-75F10INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_ABA 75G SAPK-75G08INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_ABA 75H SAPK-75H06INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_ABA 75I SAPK-75I04INSAPABA -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_ABA 816 SAPK-81601INSAPABA -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-31331] CA-GTF-TS-GMA - Note 0003577131 missing and applicable using Correction Instruction" id="0003577131" operator="check_note:0003577131">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_ABA' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_ABA 700 SAPKA70004 - SAPKA70042  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_ABA 701 701 - SAPKA70127  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_ABA 702 SAPKA70201 - SAPKA70227  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_ABA 731 SAPKA73101 - SAPKA73136  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_ABA 740 740 - SAPKA74033  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_ABA 750 750 - SAPK-75032INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_ABA 751 751 - SAPK-75119INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_ABA 752 752 - SAPK-75215INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75C' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_ABA 75C 75C - SAPK-75C15INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75D' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_ABA 75D 75D - SAPK-75D13INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75E' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_ABA 75E 75E - SAPK-75E11INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75F' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_ABA 75F 75F - SAPK-75F09INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75G' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_ABA 75G 75G - SAPK-75G07INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75H' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_ABA 75H 75H - SAPK-75H05INSAPABA  -->
          or
      ( COMPONENT = 'SAP_ABA' and VERSION = '75I' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_ABA 75I 75I - SAPK-75I03INSAPABA  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.1] BC-CST-IC 0003601480 - [CVE-2025-42935] Information Disclosure vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform(Internet Communication Manager) (Version 5) -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1418'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1418'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1510'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1510'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0522'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0522'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0816'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0816'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0413'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0413'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0310'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0310'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0029'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0029'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0014'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0014'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 4.1] [CVE-2025-42935] BC-CST-IC - Kernel patch required for SNote 3601480v5" id="0003601480_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0002'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0002'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- PRIO LOW-->
  <!-- [p4-CVSS 3.5] CA-FLP-FE-COR 0003624943 - [CVE-2025-42941] Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad) (Version 9)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-42941] CA-FLP-FE-COR - Note 0003624943 exists" id="0003624943" operator="check_note">
      <compliant>NOTE = '0003624943' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-42941] CA-FLP-FE-COR - Note 0003624943 missing and applicable using Correction Instruction" id="0003624943" operator="check_note:0003624943">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_UI 754 SAPK-75401INSAPUI - ALL_SP manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p1-CVSS 9.1] [CVE-2025-42958] BC-OP-AS4 - Kernel patch required for SNote 3627373v10" id="0003627373_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1500'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1500'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '722%'</joinnoncompliant>
      </joinstore>
      <joinstore name="SAP_KERNEL">
        <joincompliant>NAME = 'KERN_COMP_ON' and VALUE like_regexpr '.*(OS400|AS400|IBMi).*'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_COMP_ON' and VALUE like_regexpr '.*(OS400|AS400|IBMi).*'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.1] [CVE-2025-42958] BC-OP-AS4 - Kernel patch required for SNote 3627373v10" id="0003627373_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1510'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1510'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="SAP_KERNEL">
        <joincompliant>NAME = 'KERN_COMP_ON' and VALUE like_regexpr '.*(OS400|AS400|IBMi).*'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_COMP_ON' and VALUE like_regexpr '.*(OS400|AS400|IBMi).*'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p1-CVSS 9.1] [CVE-2025-42958] BC-OP-AS4 - Kernel patch required for SNote 3627373v10" id="0003627373_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0600'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0600'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
      <joinstore name="SAP_KERNEL">
        <joincompliant>NAME = 'KERN_COMP_ON' and VALUE like_regexpr '.*(OS400|AS400|IBMi).*'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_COMP_ON' and VALUE like_regexpr '.*(OS400|AS400|IBMi).*'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- ABAP -->
  <!-- [p1-CVSS 9.6] BC-DOC-RIT 0003302162 - [CVE-2023-27500] Directory Traversal vulnerability in SAP NetWeaver AS for ABAP and ABAP Platform (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.6] [CVE-2023-27500] BC-DOC-RIT Note 0003302162 exists" id="0003302162" operator="check_note">
      <compliant>NOTE = '0003302162' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.6] [CVE-2023-27500] BC-DOC-RIT Note 0003302162 missing and solution with SP available" id="0003302162" operator="check_note:0003302162">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0041' )   ) 
        <!-- SAP_BASIS 700 SAPKB70041 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_BASIS 701 SAPKB70126 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_BASIS 702 SAPKB70226 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 731 SAPKB73133 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 740 SAPKB74030 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 750 SAPK-75027INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 751 SAPK-75117INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 752 SAPK-75213INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 753 SAPK-75311INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 754 SAPK-75409INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 755 SAPK-75507INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 756 SAPK-75604INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 757 SAPK-75702INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0041' )  
        <!-- SAP_BASIS 700 SAPKB70041 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_BASIS 701 SAPKB70126 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_BASIS 702 SAPKB70226 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 731 SAPKB73133 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 740 SAPKB74030 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 750 SAPK-75027INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 751 SAPK-75117INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 752 SAPK-75213INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 753 SAPK-75311INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 754 SAPK-75409INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 755 SAPK-75507INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 756 SAPK-75604INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 757 SAPK-75702INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.6] [CVE-2023-27500] BC-DOC-RIT Note 0003302162 missing and applicable using Correction Instruction" id="0003302162" operator="check_note:0003302162">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0040' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70040  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0025' )  
        <!-- SAP_BASIS 701 701 - SAPKB70125  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0025' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70225  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73132  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- SAP_BASIS 740 740 - SAPKB74029  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 750 750 - SAPK-75026INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 751 751 - SAPK-75116INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 752 752 - SAPK-75212INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 753 753 - SAPK-75310INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 754 754 - SAPK-75408INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 755 755 - SAPK-75506INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 756 756 - SAPK-75604INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BASIS 757 757 - SAPK-75702INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 8.1] CA-DT-CNV-BAS 0003635475 - [CVE-2025-42916] Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise) (Version 5) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42916] CA-DT-CNV-BAS - Note 0003635475 exists" id="0003635475" operator="check_note">
      <compliant>NOTE = '0003635475' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42916] CA-DT-CNV-BAS - Note 0003635475 missing and solution with SP available" id="0003635475" operator="check_note:0003635475">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- S4CORE 102 SAPK-10217INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- S4CORE 103 SAPK-10315INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42916] CA-DT-CNV-BAS - Note 0003635475 missing and applicable using Correction Instruction" id="0003635475" operator="check_note:0003635475">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- S4CORE 102 102 - SAPK-10216INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- S4CORE 103 103 - SAPK-10314INS4CORE  -->
         or
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 105 105 - SAPK-10510INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 106 106 - SAPK-10608INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 107 107 - SAPK-10706INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 108 108 - SAPK-10804INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 8.1] CA-LT-OBT 0003633002 - [CVE-2025-42929] Missing input validation vulnerability in SAP Landscape Transformation Replication Server (Version 8)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42929] CA-LT-OBT - Note 0003633002 exists" id="0003633002" operator="check_note">
      <compliant>NOTE = '0003633002' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42929] CA-LT-OBT - Note 0003633002 missing and solution with SP available" id="0003633002" operator="check_note:0003633002">
      <compliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_700 SAPK-11329INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_710 SAPK-11429INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_730 SAPK-11529INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- DMIS 2011_1_731 SAPK-11629INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- DMIS 2018_1_752 SAPK-20115INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- DMIS 2020 SAPK-20211INDMIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_700 SAPK-11329INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_710 SAPK-11429INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_730 SAPK-11529INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- DMIS 2011_1_731 SAPK-11629INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- DMIS 2018_1_752 SAPK-20115INDMIS -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- DMIS 2020 SAPK-20211INDMIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 8.1] [CVE-2025-42929] CA-LT-OBT - Note 0003633002 missing and applicable using Correction Instruction" id="0003633002" operator="check_note:0003633002">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_620' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- DMIS 2011_1_620 2011_1_620 - SAPK-11117INDMIS  -->
         or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_640' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- DMIS 2011_1_640 2011_1_640 - SAPK-11217INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_700' and lpad(SP,4,'0') between '0023' and '0028' )  
        <!-- DMIS 2011_1_700 SAPK-11323INDMIS - SAPK-11328INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_710' and lpad(SP,4,'0') between '0023' and '0028' )  
        <!-- DMIS 2011_1_710 SAPK-11423INDMIS - SAPK-11428INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_730' and lpad(SP,4,'0') between '0023' and '0028' )  
        <!-- DMIS 2011_1_730 SAPK-11523INDMIS - SAPK-11528INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2011_1_731' and lpad(SP,4,'0') between '0023' and '0028' )  
        <!-- DMIS 2011_1_731 SAPK-11623INDMIS - SAPK-11628INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2018_1_752' and lpad(SP,4,'0') between '0010' and '0014' )  
        <!-- DMIS 2018_1_752 SAPK-20110INDMIS - SAPK-20114INDMIS  -->
          or
      ( COMPONENT = 'DMIS' and VERSION = '2020' and lpad(SP,4,'0') between '0006' and '0010' )  
        <!-- DMIS 2020 SAPK-20206INDMIS - SAPK-20210INDMIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.7] SV-SMG-SDD 0003581811 - [CVE-2025-27428] Directory Traversal vulnerability in SAP NetWeaver and ABAP Platform (Service Data Collection) (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-27428] SV-SMG-SDD - Note 0003581811 exists" id="0003581811" operator="check_note">
      <compliant>NOTE = '0003581811' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-27428] SV-SMG-SDD - Note 0003581811 missing and solution with SP available" id="0003581811" operator="check_note:0003581811">
      <compliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and not( (lpad(SP,4,'0'))  &lt; '0041' )   ) 
        <!-- ST-PI 2008_1_700 SAPK-70041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and not( (lpad(SP,4,'0'))  &lt; '0041' )   ) 
        <!-- ST-PI 2008_1_710 SAPK-71041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and (lpad(SP,4,'0'))  &lt; '0041' )  
        <!-- ST-PI 2008_1_700 SAPK-70041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and (lpad(SP,4,'0'))  &lt; '0041' )  
        <!-- ST-PI 2008_1_710 SAPK-71041INSTPI -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- ST-PI 740 SAPK-74031INSTPI -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.7] [CVE-2025-27428] SV-SMG-SDD - Note 0003581811 missing and applicable using Correction Instruction" id="0003581811" operator="check_note:0003581811">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_700' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_700 SAPKITLRD4 - SAPK-70040INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '2008_1_710' and lpad(SP,4,'0') between '0000' and '0040' )  
        <!-- ST-PI 2008_1_710 SAPKITLRE4 - SAPK-71040INSTPI  -->
          or
      ( COMPONENT = 'ST-PI' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- ST-PI 740 740 - SAPK-74032INSTPI  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] PA-FIO-TS 0003643832 - [CVE-2025-42917] Missing Authorization check in SAP HCM (Approve Timesheets Fiori 2.0 application) (Version 0004)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42917] PA-FIO-TS - Note 0003643832 exists" id="0003643832" operator="check_note">
      <compliant>NOTE = '0003643832' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42917] PA-FIO-TS - Note 0003643832 missing and solution with SP available" id="0003643832" operator="check_note:0003643832">
      <compliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- GBX01HR5 605 SAPK-60534INGBX01HR5 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- GBX01HR5 605 SAPK-60534INGBX01HR5 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42917] PA-FIO-TS - Note 0003643832 missing and applicable using Correction Instruction" id="0003643832" operator="check_note:0003643832">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and lpad(SP,4,'0') between '0007' and '0033' )  
        <!-- GBX01HR5 605 SAPK-60507INGBX01HR5 - SAPK-60533INGBX01HR5  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] PA-FIO-TS 0003635587 - [CVE-2025-42912] Missing Authorization check in SAP HCM (My Timesheet Fiori 2.0 application) (Version 0003)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42912] PA-FIO-TS - Note 0003635587 exists" id="0003635587" operator="check_note">
      <compliant>NOTE = '0003635587' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42912] PA-FIO-TS - Note 0003635587 missing and solution with SP available" id="0003635587" operator="check_note:0003635587">
      <compliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- GBX01HR5 605 SAPK-60534INGBX01HR5 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- GBX01HR5 605 SAPK-60534INGBX01HR5 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42912] PA-FIO-TS - Note 0003635587 missing and applicable using Correction Instruction" id="0003635587" operator="check_note:0003635587">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'GBX01HR5' and VERSION = '605' and lpad(SP,4,'0') between '0015' and '0033' )  
        <!-- GBX01HR5 605 SAPK-60515INGBX01HR5 - SAPK-60533INGBX01HR5  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.5] EPM-BPC-NW-SQE 0003614067 - [CVE-2025-42930] Denial of Service (DoS) vulnerability in SAP Business Planning and Consolidation (Version 0005)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42930] EPM-BPC-NW-SQE - Note 0003614067 exists" id="0003614067" operator="check_note">
      <compliant>NOTE = '0003614067' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42930] EPM-BPC-NW-SQE - Note 0003614067 missing and solution with SP available" id="0003614067" operator="check_note:0003614067">
      <compliant>(
      ( COMPONENT = 'BPC4HANA' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- BPC4HANA 200 SAPK-20018INBPC4HANA -->
          or
      ( COMPONENT = 'BPC4HANA' and VERSION = '300' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- BPC4HANA 300 SAPK-30012INBPC4HANA -->
          or
      ( COMPONENT = 'CPMBPC' and VERSION = '810' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- CPMBPC 810 SAPK-81029INCPMBPC -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BW 914 SAPK-91413INSAPBW -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BPC4HANA' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- BPC4HANA 200 SAPK-20018INBPC4HANA -->
          or
      ( COMPONENT = 'BPC4HANA' and VERSION = '300' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- BPC4HANA 300 SAPK-30012INBPC4HANA -->
          or
      ( COMPONENT = 'CPMBPC' and VERSION = '810' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- CPMBPC 810 SAPK-81029INCPMBPC -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BW 750 SAPK-75033INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BW 751 SAPK-75121INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BW 752 SAPK-75217INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BW 753 SAPK-75315INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 754 SAPK-75413INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BW 755 SAPK-75511INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BW 756 SAPK-75609INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BW 757 SAPK-75707INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BW 758 SAPK-75805INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BW 816 SAPK-81601INSAPBW -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BW 914 SAPK-91413INSAPBW -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.5] [CVE-2025-42930] EPM-BPC-NW-SQE - Note 0003614067 missing and applicable using Correction Instruction" id="0003614067" operator="check_note:0003614067">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BPC4HANA' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- BPC4HANA 200 200 - SAPK-20017INBPC4HANA  -->
          or
      ( COMPONENT = 'BPC4HANA' and VERSION = '300' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- BPC4HANA 300 300 - SAPK-30011INBPC4HANA  -->
          or
      ( COMPONENT = 'CPMBPC' and VERSION = '810' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- CPMBPC 810 810 - SAPK-81028INCPMBPC  -->
         or
      ( COMPONENT = 'SAP_BW' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BW 750 750 - SAPK-75032INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BW 751 751 - SAPK-75120INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BW 752 752 - SAPK-75216INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BW 753 753 - SAPK-75314INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BW 754 754 - SAPK-75412INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BW 755 755 - SAPK-75510INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BW 756 756 - SAPK-75608INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BW 757 757 - SAPK-75706INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BW 758 758 - SAPK-75804INSAPBW  -->
          or
      ( COMPONENT = 'SAP_BW' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BW 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] CRM-BF-ML 0003629325 - [CVE-2025-42938] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver ABAP Platform (Version 9) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42938] CRM-BF-ML - Note 0003629325 exists" id="0003629325" operator="check_note">
      <compliant>NOTE = '0003629325' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42938] CRM-BF-ML - Note 0003629325 missing and solution with SP available" id="0003629325" operator="check_note:0003629325">
      <compliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- BBPCRM 713 SAPKU71326 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- BBPCRM 714 SAPK-71425INBBPCRM -->
         or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CRM 100 SAPK-10011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- S4CRM 200 SAPK-20012INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CRM 204 SAPK-20413INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CRM 205 SAPK-20511INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CRM 206 SAPK-20609INS4CRM -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- BBPCRM 713 SAPKU71326 -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- BBPCRM 714 SAPK-71425INBBPCRM -->
         or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CRM 100 SAPK-10011INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- S4CRM 200 SAPK-20012INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CRM 204 SAPK-20413INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CRM 205 SAPK-20511INS4CRM -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CRM 206 SAPK-20609INS4CRM -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42938] CRM-BF-ML - Note 0003629325 missing and applicable using Correction Instruction" id="0003629325" operator="check_note:0003629325">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'BBPCRM' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0025' )  
        <!-- BBPCRM 713 SAPKU71301 - SAPKU71325  -->
          or
      ( COMPONENT = 'BBPCRM' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- BBPCRM 714 SAPK-71401INBBPCRM - SAPK-71424INBBPCRM  -->
         or
      ( COMPONENT = 'S4CRM' and VERSION = '100' and lpad(SP,4,'0') between '0001' and '0010' )  
        <!-- S4CRM 100 SAPK-10001INS4CRM - SAPK-10010INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- S4CRM 200 200 - SAPK-20011INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '204' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CRM 204 204 - SAPK-20412INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '205' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CRM 205 205 - SAPK-20510INS4CRM  -->
          or
      ( COMPONENT = 'S4CRM' and VERSION = '206' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CRM 206 206 - SAPK-20608INS4CRM  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] SRM-EBP-TEC-ITS 0003647098 - [CVE-2025-42920] Cross-Site Scripting (XSS) vulnerability in SAP Supplier Relationship Management (Version 0001)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42920] SRM-EBP-TEC-ITS - Note 0003647098 exists" id="0003647098" operator="check_note">
      <compliant>NOTE = '0003647098' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42920] SRM-EBP-TEC-ITS - Note 0003647098 missing and solution with SP available" id="0003647098" operator="check_note:0003647098">
      <compliant>(
      ( COMPONENT = 'SRM_SERVER' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- SRM_SERVER 702 SAPK-70236INSRMSRV -->
          or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '713' and not( (lpad(SP,4,'0'))  &lt; '0031' )   ) 
        <!-- SRM_SERVER 713 SAPK-71331INSRMSRV -->
          or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '714' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SRM_SERVER 714 SAPK-71425INSRMSRV -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SRM_SERVER' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- SRM_SERVER 702 SAPK-70236INSRMSRV -->
          or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '713' and (lpad(SP,4,'0'))  &lt; '0031' )  
        <!-- SRM_SERVER 713 SAPK-71331INSRMSRV -->
          or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '714' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SRM_SERVER 714 SAPK-71425INSRMSRV -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42920] SRM-EBP-TEC-ITS - Note 0003647098 missing and applicable using Correction Instruction" id="0003647098" operator="check_note:0003647098">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SRM_SERVER' and VERSION = '700' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SRM_SERVER 700 SAPKIBKV01 - ALL_SP  -->
          or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '701' and lpad(SP,4,'0') between '0003' and '0999' )  
        <!-- SRM_SERVER 701 SAPK-70103INSRMSRV - ALL_SP  -->
          or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0035' )  
        <!-- SRM_SERVER 702 SAPK-70201INSRMSRV - SAPK-70235INSRMSRV  -->
          or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '713' and lpad(SP,4,'0') between '0001' and '0030' )  
        <!-- SRM_SERVER 713 SAPK-71301INSRMSRV - SAPK-71330INSRMSRV  -->
         or
      ( COMPONENT = 'SRM_SERVER' and VERSION = '714' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- SRM_SERVER 714 SAPK-71401INSRMSRV - SAPK-71424INSRMSRV  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4] FI-FIO-AP 0003409013 - [CVE-2025-42915] Missing Authorization Check in Fiori app (Manage Payment Blocks) (Version 0007)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42915] FI-FIO-AP - Note 0003409013 exists" id="0003409013" operator="check_note">
      <compliant>NOTE = '0003409013' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42915] FI-FIO-AP - Note 0003409013 missing and solution with SP available" id="0003409013" operator="check_note:0003409013">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42915] FI-FIO-AP - Note 0003409013 missing and applicable using Correction Instruction" id="0003409013" operator="check_note:0003409013">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.0] SV-SMG-SDD 0003627644 - [CVE-2025-42911] Missing Authorization check in SAP NetWeaver (Service Data Download) (Version 0011)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42911] SV-SMG-SDD - Note 0003627644 exists" id="0003627644" operator="check_note">
      <compliant>NOTE = '0003627644' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42911] SV-SMG-SDD - Note 0003627644 missing and solution with SP available" id="0003627644" operator="check_note:0003627644">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0038' )   ) 
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 740 SAPKB74035 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0038' )  
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 740 SAPKB74035 -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42911] SV-SMG-SDD - Note 0003627644 missing and applicable using Correction Instruction" id="0003627644" operator="check_note:0003627644">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0037' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73137  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0034' )  
        <!-- SAP_BASIS 740 740 - SAPKB74034  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.9] BC-DB-DBI 0003610322 - [CVE-2025-42961] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 5)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 exists" id="0003610322" operator="check_note">
      <compliant>NOTE = '0003610322' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 missing and solution with SP available" id="0003610322" operator="check_note:0003610322">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.9] [CVE-2025-42961] BC-DB-DBI - Note 0003610322 missing and applicable using Correction Instruction" id="0003610322" operator="check_note:0003610322">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0020' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70020 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0015' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70115 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0002' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70202 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0018' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74018 - SAPKB74033  -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0032' )  
        <!-- SAP_BASIS 750 750 - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] BC-CCM-BTC 0003623504 - [CVE-2025-42918] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Background Processing) (Version 4)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42918] BC-CCM-BTC - Note 0003623504 exists" id="0003623504" operator="check_note">
      <compliant>NOTE = '0003623504' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42918] BC-CCM-BTC - Note 0003623504 missing and solution with SP available" id="0003623504" operator="check_note:0003623504">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42918] BC-CCM-BTC - Note 0003623504 missing and applicable using Correction Instruction" id="0003623504" operator="check_note:0003623504">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0009' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70009 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] PP-BD-WKC 0003450692 - [CVE-2025-42923] Cross-Site Request Forgery (CSRF) vulnerability in SAP Fiori App (F4044 Manage Work Center Groups) (Version 0008)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42923] PP-BD-WKC - Note 0003450692 exists" id="0003450692" operator="check_note">
      <compliant>NOTE = '0003450692' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42923] PP-BD-WKC - Note 0003450692 missing and solution with SP available" id="0003450692" operator="check_note:0003450692">
      <compliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- UIS4HOP1 600 SAPK-60010INUIS4HOP1 -->
         or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- UIS4HOP1 700 SAPK-70007INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- UIS4HOP1 800 SAPK-80005INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- UIS4HOP1 900 SAPK-90003INUIS4HOP1 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- UIS4HOP1 600 SAPK-60010INUIS4HOP1 -->
         or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- UIS4HOP1 700 SAPK-70007INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- UIS4HOP1 800 SAPK-80005INUIS4HOP1 -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- UIS4HOP1 900 SAPK-90003INUIS4HOP1 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42923] PP-BD-WKC - Note 0003450692 missing and applicable using Correction Instruction" id="0003450692" operator="check_note:0003450692">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'UIS4HOP1' and VERSION = '600' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- UIS4HOP1 600 600 - SAPK-60009INUIS4HOP1  -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '700' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- UIS4HOP1 700 700 - SAPK-70006INUIS4HOP1  -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- UIS4HOP1 800 800 - SAPK-80004INUIS4HOP1  -->
          or
      ( COMPONENT = 'UIS4HOP1' and VERSION = '900' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- UIS4HOP1 900 900 - SAPK-90002INUIS4HOP1  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 3.5] CA-FLP-FE-COR 0003624943 - [CVE-2025-42941] Reverse Tabnabbing vulnerability in SAP Fiori (Launchpad) (Version 0009)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-42941] CA-FLP-FE-COR - Note 0003624943 exists" id="0003624943" operator="check_note">
      <compliant>NOTE = '0003624943' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.5] [CVE-2025-42941] CA-FLP-FE-COR - Note 0003624943 missing and applicable using Correction Instruction" id="0003624943" operator="check_note:0003624943">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_UI' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- SAP_UI 754 SAPK-75401INSAPUI - ALL_SP manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.6] [CVE-2023-27500] BC-DOC-RIT - Note 0003302162 exists" id="0003302162" operator="check_note">
      <compliant>NOTE = '0003302162' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.6] [CVE-2023-27500] BC-DOC-RIT - Note 0003302162 missing and solution with SP available" id="0003302162" operator="check_note:0003302162">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0041' )   ) 
        <!-- SAP_BASIS 700 SAPKB70041 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_BASIS 701 SAPKB70126 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_BASIS 702 SAPKB70226 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 731 SAPKB73133 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- SAP_BASIS 740 SAPKB74030 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0027' )   ) 
        <!-- SAP_BASIS 750 SAPK-75027INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 751 SAPK-75117INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 752 SAPK-75213INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 753 SAPK-75311INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 754 SAPK-75409INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 755 SAPK-75507INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 756 SAPK-75604INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- SAP_BASIS 757 SAPK-75702INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0041' )  
        <!-- SAP_BASIS 700 SAPKB70041 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_BASIS 701 SAPKB70126 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_BASIS 702 SAPKB70226 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 731 SAPKB73133 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- SAP_BASIS 740 SAPKB74030 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0027' )  
        <!-- SAP_BASIS 750 SAPK-75027INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 751 SAPK-75117INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 752 SAPK-75213INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 753 SAPK-75311INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 754 SAPK-75409INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 755 SAPK-75507INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 756 SAPK-75604INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- SAP_BASIS 757 SAPK-75702INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.6] [CVE-2023-27500] BC-DOC-RIT - Note 0003302162 missing and applicable using Correction Instruction" id="0003302162" operator="check_note:0003302162">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0040' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70040  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0025' )  
        <!-- SAP_BASIS 701 701 - SAPKB70125  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0025' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70225  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73132  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0029' )  
        <!-- SAP_BASIS 740 740 - SAPKB74029  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0026' )  
        <!-- SAP_BASIS 750 750 - SAPK-75026INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 751 751 - SAPK-75116INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 752 752 - SAPK-75212INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 753 753 - SAPK-75310INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 754 754 - SAPK-75408INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 755 755 - SAPK-75506INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 756 756 - SAPK-75604INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0002' )  
        <!-- SAP_BASIS 757 757 - SAPK-75702INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.0] SRM-UIA-SHP-BD 0003647332 - [CVE-2025-48913] Security Misconfiguration vulnerability in SAP Data Hub Integration Suite (Version 3)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.0] [CVE-2025-48913] SRM-UIA-SHP-BD - Note 0003647332 exists" id="0003647332" operator="check_note">
      <compliant>NOTE = '0003647332' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.0] [CVE-2025-48913] SRM-UIA-SHP-BD - Note 0003647332 missing and solution with SP available" id="0003647332" operator="check_note:0003647332">
      <compliant>(
      ( COMPONENT = 'SRMNXP01' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SRMNXP01 100 SAPK-10033INSRMNXP01 -->
         or
      ( COMPONENT = 'SRMNXP01' and VERSION = '150' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SRMNXP01 150 SAPK-15025INSRMNXP01 -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SRMNXP01' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SRMNXP01 100 SAPK-10033INSRMNXP01 -->
         or
      ( COMPONENT = 'SRMNXP01' and VERSION = '150' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SRMNXP01 150 SAPK-15025INSRMNXP01 -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.0] [CVE-2025-48913] SRM-UIA-SHP-BD - Note 0003647332 missing and applicable using Correction Instruction" id="0003647332" operator="check_note:0003647332">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SRMNXP01' and VERSION = '100' and lpad(SP,4,'0') between '0013' and '0032' )  
        <!-- SRMNXP01 100 SAPK-10013INSRMNXP01 - SAPK-10032INSRMNXP01  -->
         or
      ( COMPONENT = 'SRMNXP01' and VERSION = '150' and lpad(SP,4,'0') between '0006' and '0024' )  
        <!-- SRMNXP01 150 SAPK-15006INSRMNXP01 - SAPK-15024INSRMNXP01  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM-->
  <!-- [p3-CVSS 5.4] BC-MID-API 0003652788 - [CVE-2025-42901] Code Injection vulnerability in SAP Application Server for ABAP (BAPI Browser) (Version 08)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42901] BC-MID-API - Note 0003652788 exists" id="0003652788" operator="check_note">
      <compliant>NOTE = '0003652788' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42901] BC-MID-API - Note 0003652788 missing and solution with SP available" id="0003652788" operator="check_note:0003652788">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0038' )   ) 
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 740 SAPKB74035 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 750 SAPK-75035INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- SAP_BASIS 751 SAPK-75122INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0038' )  
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 740 SAPKB74035 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 750 SAPK-75035INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- SAP_BASIS 751 SAPK-75122INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42901] BC-MID-API - Note 0003652788 missing and applicable using Correction Instruction" id="0003652788" operator="check_note:0003652788">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0037' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73137  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0034' )  
        <!-- SAP_BASIS 740 740 - SAPKB74034  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0034' )  
        <!-- SAP_BASIS 750 750 - SAPK-75034INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4] BC-ABA-SC 0003642021 - [CVE-2025-42908] Cross-Site Request Forgery (CSRF) vulnerability in SAP NetWeaver Application Server for ABAP (Version 07)  -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42908] BC-ABA-SC - Kernel patch required for SNote 3642021v7" id="0003642021_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1517'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1517'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42908] BC-ABA-SC - Kernel patch required for SNote 3642021v7" id="0003642021_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0613'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0613'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42908] BC-ABA-SC - Kernel patch required for SNote 3642021v7" id="0003642021_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0831'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0831'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42908] BC-ABA-SC - Kernel patch required for SNote 3642021v7" id="0003642021_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0427'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0427'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42908] BC-ABA-SC - Kernel patch required for SNote 3642021v7" id="0003642021_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0324'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0324'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42908] BC-ABA-SC - Kernel patch required for SNote 3642021v7" id="0003642021_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0063'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0063'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4] FI-FIO-AP 0003409013 - [CVE-2025-42915] Missing Authorization Check in Fiori app (Manage Payment Blocks) (Version 07)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42915] FI-FIO-AP - Note 0003409013 exists" id="0003409013" operator="check_note">
      <compliant>NOTE = '0003409013' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42915] FI-FIO-AP - Note 0003409013 missing and solution with SP available" id="0003409013" operator="check_note:0003409013">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 107 SAPK-10704INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 108 SAPK-10802INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42915] FI-FIO-AP - Note 0003409013 missing and applicable using Correction Instruction" id="0003409013" operator="check_note:0003409013">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 107 107 - SAPK-10703INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 108 108 - SAPK-10801INS4CORE  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.3] BC-SEC-LGN 0003627308 - [CVE-2025-42902] Memory Corruption vulnerability in SAP Netweaver AS ABAP and ABAP Platform (Version 05)  -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1419'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1419'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1510'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1510'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0528'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0528'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0824'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0824'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0421'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0421'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0318'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0318'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="No">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0037'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0037'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0022'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0022'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 5.3] [CVE-2025-42902] BC-SEC-LGN - Kernel patch required for SNote 3627308v5" id="0003627308_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0009'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0009'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] FS-CM 0003656781 - [CVE-2025-42903] User Enumeration and Sensitive Data Exposure via RFC Function in SAP Financial Service Claims Management (Version 11)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42903] FS-CM - Note 0003656781 exists" id="0003656781" operator="check_note">
      <compliant>NOTE = '0003656781' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42903] FS-CM - Note 0003656781 missing and solution with SP available" id="0003656781" operator="check_note:0003656781">
      <compliant>(
      ( COMPONENT = 'INSURANCE' and VERSION = '803' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- INSURANCE 803 SAPK-80315ININSURANC -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '804' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- INSURANCE 804 SAPK-80413ININSURANC -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '805' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- INSURANCE 805 SAPK-80511ININSURANC -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '806' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- INSURANCE 806 SAPK-80609ININSURANC -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CEXT 107 SAPK-10707INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CEXT 108 SAPK-10805INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '109' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CEXT 109 SAPK-10901INS4CEXT -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'INSURANCE' and VERSION = '803' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- INSURANCE 803 SAPK-80315ININSURANC -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '804' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- INSURANCE 804 SAPK-80413ININSURANC -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '805' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- INSURANCE 805 SAPK-80511ININSURANC -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '806' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- INSURANCE 806 SAPK-80609ININSURANC -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CEXT 107 SAPK-10707INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CEXT 108 SAPK-10805INS4CEXT -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '109' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CEXT 109 SAPK-10901INS4CEXT -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42903] FS-CM - Note 0003656781 missing and applicable using Correction Instruction" id="0003656781" operator="check_note:0003656781">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'INSURANCE' and VERSION = '803' and lpad(SP,4,'0') between '0001' and '0014' )  
        <!-- INSURANCE 803 SAPK-80301ININSURANC - SAPK-80314ININSURANC  -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '804' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- INSURANCE 804 804 - SAPK-80412ININSURANC  -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '805' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- INSURANCE 805 805 - SAPK-80510ININSURANC  -->
          or
      ( COMPONENT = 'INSURANCE' and VERSION = '806' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- INSURANCE 806 806 - SAPK-80608ININSURANC  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CEXT 107 107 - SAPK-10706INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CEXT 108 108 - SAPK-10804INS4CEXT  -->
          or
      ( COMPONENT = 'S4CEXT' and VERSION = '109' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CEXT 109 109 - 109  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] FI-FIO-AR-PAY 0003625683 - [CVE-2025-42939] Missing Authorization Check in SAP S/4HANA (Manage Processing Rules - For Bank Statements) (Version 05)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42939] FI-FIO-AR-PAY - Note 0003625683 exists" id="0003625683" operator="check_note">
      <compliant>NOTE = '0003625683' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42939] FI-FIO-AR-PAY - Note 0003625683 missing and solution with SP available" id="0003625683" operator="check_note:0003625683">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 109 SAPK-10901INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 109 SAPK-10901INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42939] FI-FIO-AR-PAY - Note 0003625683 missing and applicable using Correction Instruction" id="0003625683" operator="check_note:0003625683">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 105 105 - SAPK-10510INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 106 106 - SAPK-10608INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 107 107 - SAPK-10706INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 108 108 - SAPK-10804INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and lpad(SP,4,'0') between '0000' and '0000' )  
        <!-- S4CORE 109 109 - 109  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO LOW-->
  <!-- [p4-CVSS 3.0] BC-VCM-CAL 0003643871 - [CVE-2025-42909] Security Misconfiguration vulnerability in SAP Cloud Appliance Library Appliances (Version 07)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.0] [CVE-2025-42909] BC-VCM-CAL - Note 0003643871 exists" id="0003643871" operator="check_note">
      <compliant>NOTE = '0003643871' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.0] [CVE-2025-42909] BC-VCM-CAL - Note 0003643871 missing and applicable using Correction Instruction" id="0003643871" operator="check_note:0003643871">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'TITANIUM_WEBAPP' and VERSION = '4.0' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- TITANIUM_WEBAPP 4.0 4.0 - ALL_SP manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42887] SV-SMG-SVD-SWB - Note 0003668705 exists" id="0003668705" operator="check_note">
      <compliant>NOTE = '0003668705' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42887] SV-SMG-SVD-SWB - Note 0003668705 missing and solution with SP available" id="0003668705" operator="check_note:0003668705">
      <compliant>(
		  ( COMPONENT = 'ST' and VERSION = '720' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- ST 720 SAPK-72022INSTMAIN -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'ST' and VERSION = '720' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- ST 720 SAPK-72022INSTMAIN -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42887] SV-SMG-SVD-SWB - Note 0003668705 missing and applicable using Correction Instruction" id="0003668705" operator="check_note:0003668705">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'ST' and VERSION = '720' and lpad(SP,4,'0') between '0003' and '0021' )  
        <!-- ST 720 SAPK-72003INSTMAIN - SAPK-72021INSTMAIN  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p1-CVSS 9.0] SRM-UIA-SHP-BD 0003647332 - [CVE-2025-48913] Security Misconfiguration vulnerability in SAP Data Hub Integration Suite (Version 5)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.0] [CVE-2025-48913] SRM-UIA-SHP-BD - Note 0003647332 exists" id="0003647332" operator="check_note">
      <compliant>NOTE = '0003647332' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.0] [CVE-2025-48913] SRM-UIA-SHP-BD - Note 0003647332 missing and solution with SP available" id="0003647332" operator="check_note:0003647332">
      <compliant>(
		  ( COMPONENT = 'SRMNXP01' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SRMNXP01 100 SAPK-10033INSRMNXP01 -->
			 or
		  ( COMPONENT = 'SRMNXP01' and VERSION = '150' and not( (lpad(SP,4,'0'))  &lt; '0025' )   ) 
        <!-- SRMNXP01 150 SAPK-15025INSRMNXP01 -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'SRMNXP01' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SRMNXP01 100 SAPK-10033INSRMNXP01 -->
			 or
		  ( COMPONENT = 'SRMNXP01' and VERSION = '150' and (lpad(SP,4,'0'))  &lt; '0025' )  
        <!-- SRMNXP01 150 SAPK-15025INSRMNXP01 -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.0] [CVE-2025-48913] SRM-UIA-SHP-BD - Note 0003647332 missing and applicable using Correction Instruction" id="0003647332" operator="check_note:0003647332">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'SRMNXP01' and VERSION = '100' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- SRMNXP01 100 SAPK-10001INSRMNXP01 - SAPK-10032INSRMNXP01  -->
			 or
		  ( COMPONENT = 'SRMNXP01' and VERSION = '150' and lpad(SP,4,'0') between '0001' and '0024' )  
        <!-- SRMNXP01 150 SAPK-15001INSRMNXP01 - SAPK-15024INSRMNXP01  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH -->
  <!-- [p1-CVSS 7.5] 0003633049 BC-IAM-SSO-CCL - [CVE-2025-42940] Memory Corruption vulnerability in SAP CommonCryptoLib (Version 7) -->
  <!-- ABAP Kernel -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1510'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1510'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1515'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1515'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0611'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0611'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0829'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0829'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0426'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0426'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0323'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0323'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0237'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0237'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '804_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0041'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0041'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0026'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0026'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0050'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0050'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3633049v7" id="0003633049_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0001'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0001'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '917_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '917_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM -->
  <!-- [p3-CVSS 6.1] PA-ER 0003642398 - [CVE-2025-42924] Open Redirect vulnerabilities in SAP S/4HANA landscape (SAP E-Recruiting BSP) (Version 2) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42924] PA-ER - Note 0003642398 exists" id="0003642398" operator="check_note">
      <compliant>NOTE = '0003642398' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42924] PA-ER - Note 0003642398 missing and solution with SP available" id="0003642398" operator="check_note:0003642398">
      <compliant>(
		  ( COMPONENT = 'ERECRUIT' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0036' )   ) 
        <!-- ERECRUIT 600 SAPK-60036INERECRUIT -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- ERECRUIT 606 SAPK-60637INERECRUIT -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0030' )   ) 
        <!-- ERECRUIT 617 SAPK-61730INERECRUIT -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '802' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- ERECRUIT 802 SAPK-80218INERECRUIT -->
         or
		  ( COMPONENT = 'S4ERECRT' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4ERECRT 100 SAPK-10007INS4ERECRT -->
          or
		  ( COMPONENT = 'S4ERECRT' and VERSION = '200' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4ERECRT 200 SAPK-20006INS4ERECRT -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'ERECRUIT' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0036' )  
        <!-- ERECRUIT 600 SAPK-60036INERECRUIT -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- ERECRUIT 606 SAPK-60637INERECRUIT -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0030' )  
        <!-- ERECRUIT 617 SAPK-61730INERECRUIT -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '802' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- ERECRUIT 802 SAPK-80218INERECRUIT -->
         or
		  ( COMPONENT = 'S4ERECRT' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4ERECRT 100 SAPK-10007INS4ERECRT -->
          or
		  ( COMPONENT = 'S4ERECRT' and VERSION = '200' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4ERECRT 200 SAPK-20006INS4ERECRT -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42924] PA-ER - Note 0003642398 missing and applicable using Correction Instruction" id="0003642398" operator="check_note:0003642398">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'ERECRUIT' and VERSION = '600' and lpad(SP,4,'0') between '0005' and '0035' )  
        <!-- ERECRUIT 600 SAPK-60005INERECRUIT - SAPK-60035INERECRUIT  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- ERECRUIT 603 603 - ALL_SP  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '604' and lpad(SP,4,'0') between '0001' and '0999' )  
        <!-- ERECRUIT 604 SAPK-60401INERECRUIT - ALL_SP  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '605' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- ERECRUIT 605 605 - ALL_SP  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '606' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- ERECRUIT 606 SAPK-60601INERECRUIT - SAPK-60636INERECRUIT  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '616' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- ERECRUIT 616 616 - ALL_SP  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0029' )  
        <!-- ERECRUIT 617 SAPK-61701INERECRUIT - SAPK-61729INERECRUIT  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '800' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- ERECRUIT 800 800 - ALL_SP  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '801' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- ERECRUIT 801 801 - ALL_SP  -->
          or
		  ( COMPONENT = 'ERECRUIT' and VERSION = '802' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- ERECRUIT 802 802 - SAPK-80217INERECRUIT  -->
         or
		  ( COMPONENT = 'S4ERECRT' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4ERECRT 100 100 - SAPK-10006INS4ERECRT  -->
          or
		  ( COMPONENT = 'S4ERECRT' and VERSION = '200' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4ERECRT 200 200 - SAPK-20005INS4ERECRT  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 6.1] BC-MID-ICF 0003597355 - [CVE-2025-42942] Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Application Server for ABAP (Version 0007) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42942] BC-MID-ICF - Note 0003597355 exists" id="0003597355" operator="check_note">
      <compliant>NOTE = '0003597355' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42942] BC-MID-ICF - Note 0003597355 missing and solution with SP available" id="0003597355" operator="check_note:0003597355">
      <compliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 914 SAPK-91413INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '916' and not( (lpad(SP,4,'0'))  &lt; '0003' )   ) 
        <!-- SAP_BASIS 916 SAPK-91603INSAPBASIS -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '914' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 914 SAPK-91413INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '916' and (lpad(SP,4,'0'))  &lt; '0003' )  
        <!-- SAP_BASIS 916 SAPK-91603INSAPBASIS -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.1] [CVE-2025-42942] BC-MID-ICF - Note 0003597355 missing and applicable using Correction Instruction" id="0003597355" operator="check_note:0003597355">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70004 - SAPKB70042  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 701 701 - SAPKB70127  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0010' and '0999' )  
        <!-- SAP_BASIS 702 SAPKB70210 - ALL_SP  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73110 - SAPKB73136  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 740 740 - SAPKB74033  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') = '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.4] FI-LOC-SAF-PL 0002886616 - [CVE-2025-42889] SQL Injection vulnerability in SAP Starter Solution (PL SAFT) (Version 0008) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42889] FI-LOC-SAF-PL - Note 0002886616 exists" id="0002886616" operator="check_note">
      <compliant>NOTE = '0002886616' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42889] FI-LOC-SAF-PL - Note 0002886616 missing and solution with SP available" id="0002886616" operator="check_note:0002886616">
      <compliant>(
		  ( COMPONENT = 'S4CORE' and VERSION = '100' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- S4CORE 100 SAPK-10010INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '101' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- S4CORE 101 SAPK-10108INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '102' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- S4CORE 102 SAPK-10206INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '103' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- S4CORE 103 SAPK-10304INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0002' )   ) 
        <!-- S4CORE 104 SAPK-10402INS4CORE -->
         or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '600' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_APPL 600 SAPKH60033 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '602' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_APPL 602 SAPKH60223 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '603' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- SAP_APPL 603 SAPKH60322 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '604' and not( (lpad(SP,4,'0'))  &lt; '0023' )   ) 
        <!-- SAP_APPL 604 SAPKH60423 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '605' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_APPL 605 SAPKH60520 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '606' and not( (lpad(SP,4,'0'))  &lt; '0026' )   ) 
        <!-- SAP_APPL 606 SAPKH60626 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '616' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_APPL 616 SAPKH61615 -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '617' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_FIN 617 SAPK-61721INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '618' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_FIN 618 SAPK-61814INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_FIN 700 SAPK-70017INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '720' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_FIN 720 SAPK-72013INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '730' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_FIN 730 SAPK-73015INSAPFIN -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'S4CORE' and VERSION = '100' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- S4CORE 100 SAPK-10010INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '101' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- S4CORE 101 SAPK-10108INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '102' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- S4CORE 102 SAPK-10206INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '103' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- S4CORE 103 SAPK-10304INS4CORE -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0002' )  
        <!-- S4CORE 104 SAPK-10402INS4CORE -->
         or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '600' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_APPL 600 SAPKH60033 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '602' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_APPL 602 SAPKH60223 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '603' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- SAP_APPL 603 SAPKH60322 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '604' and (lpad(SP,4,'0'))  &lt; '0023' )  
        <!-- SAP_APPL 604 SAPKH60423 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '605' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_APPL 605 SAPKH60520 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '606' and (lpad(SP,4,'0'))  &lt; '0026' )  
        <!-- SAP_APPL 606 SAPKH60626 -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '616' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_APPL 616 SAPKH61615 -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '617' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_FIN 617 SAPK-61721INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '618' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_FIN 618 SAPK-61814INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_FIN 700 SAPK-70017INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '720' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_FIN 720 SAPK-72013INSAPFIN -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '730' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_FIN 730 SAPK-73015INSAPFIN -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.4] [CVE-2025-42889] FI-LOC-SAF-PL - Note 0002886616 missing and applicable using Correction Instruction" id="0002886616" operator="check_note:0002886616">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'S4CORE' and VERSION = '100' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- S4CORE 100 100 - SAPK-10009INS4CORE  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '101' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- S4CORE 101 101 - SAPK-10107INS4CORE  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '102' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- S4CORE 102 102 - SAPK-10205INS4CORE  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '103' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- S4CORE 103 103 - SAPK-10303INS4CORE  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0001' )  
        <!-- S4CORE 104 104 - SAPK-10401INS4CORE  -->
         or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '600' and lpad(SP,4,'0') between '0001' and '0032' )  
        <!-- SAP_APPL 600 SAPKH60001 - SAPKH60032  -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '602' and lpad(SP,4,'0') between '0000' and '0022' )  
        <!-- SAP_APPL 602 602 - SAPKH60222  -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '603' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- SAP_APPL 603 603 - SAPKH60321  -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '604' and lpad(SP,4,'0') between '0001' and '0022' )  
        <!-- SAP_APPL 604 SAPKH60401 - SAPKH60422  -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '605' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_APPL 605 605 - SAPKH60519  -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '606' and lpad(SP,4,'0') between '0001' and '0025' )  
        <!-- SAP_APPL 606 SAPKH60601 - SAPKH60625  -->
          or
		  ( COMPONENT = 'SAP_APPL' and VERSION = '616' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_APPL 616 616 - SAPKH61614  -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '617' and lpad(SP,4,'0') between '0001' and '0020' )  
        <!-- SAP_FIN 617 SAPK-61701INSAPFIN - SAPK-61720INSAPFIN  -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '618' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_FIN 618 618 - SAPK-61813INSAPFIN  -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '700' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_FIN 700 700 - SAPK-70016INSAPFIN  -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '720' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_FIN 720 720 - SAPK-72012INSAPFIN  -->
          or
		  ( COMPONENT = 'SAP_FIN' and VERSION = '730' and lpad(SP,4,'0') between '0003' and '0014' )  
        <!-- SAP_FIN 730 SAPK-73003INSAPFIN - SAPK-73014INSAPFIN  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.0] SV-SMG-SDD 0003627644 - [CVE-2025-42911] Missing Authorization check in SAP NetWeaver (Service Data Download) (Version 0011) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42911] SV-SMG-SDD - Note 0003627644 exists" id="0003627644" operator="check_note">
      <compliant>NOTE = '0003627644' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42911] SV-SMG-SDD - Note 0003627644 missing and solution with SP available" id="0003627644" operator="check_note:0003627644">
      <compliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0038' )   ) 
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 740 SAPKB74035 -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0015' )   ) 
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0038' )  
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 740 SAPKB74035 -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 750 SAPK-75034INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0015' )  
        <!-- SAP_BASIS 753 SAPK-75315INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.0] [CVE-2025-42911] SV-SMG-SDD - Note 0003627644 missing and applicable using Correction Instruction" id="0003627644" operator="check_note:0003627644">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0004' and '0042' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73137  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0027' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73137  -->
          or	
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73137  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0037' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73137  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0034' )  
        <!-- SAP_BASIS 740 740 - SAPKB74034  -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0033' )  
        <!-- SAP_BASIS 750 750 - SAPK-75033INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0020' )  
        <!-- SAP_BASIS 751 751 - SAPK-75120INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0016' )  
        <!-- SAP_BASIS 752 752 - SAPK-75216INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0014' )  
        <!-- SAP_BASIS 753 753 - SAPK-75314INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') = '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS ] BC-DB-DB6 0003643337 - [CVE-2025-42882] Missing Authorization check in SAP NetWeaver Application Server for ABAP (Version 0004) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42882] BC-DB-DB6 - Note 0003643337 exists" id="0003643337" operator="check_note">
      <compliant>NOTE = '0003643337' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42882] BC-DB-DB6 - Note 0003643337 missing and solution with SP available" id="0003643337" operator="check_note:0003643337">
      <compliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0044' )   ) 
        <!-- SAP_BASIS 700 SAPKB70044 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0038' )   ) 
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 740 SAPKB74035 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 750 SAPK-75035INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- SAP_BASIS 751 SAPK-75122INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 753 SAPK-75316INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 754 SAPK-75414INSAPBASIS -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0044' )  
        <!-- SAP_BASIS 700 SAPKB70044 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0038' )  
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 740 SAPKB74035 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 750 SAPK-75035INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- SAP_BASIS 751 SAPK-75122INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 753 SAPK-75316INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 754 SAPK-75414INSAPBASIS -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42882] BC-DB-DB6 - Note 0003643337 missing and applicable using Correction Instruction" id="0003643337" operator="check_note:0003643337">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0031' and '0043' )  
        <!-- SAP_BASIS 700 SAPKB70031 - SAPKB70043  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0016' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70116 - SAPKB70127  -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0016' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70216 - SAPKB70227  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0013' and '0037' )  
        <!-- SAP_BASIS 731 SAPKB73113 - SAPKB73137  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0008' and '0034' )  
        <!-- SAP_BASIS 740 SAPKB74008 - SAPKB74034  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0034' )  
        <!-- SAP_BASIS 750 750 - SAPK-75034INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- SAP_BASIS 751 751 - SAPK-75121INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- SAP_BASIS 752 752 - SAPK-75217INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 753 753 - SAPK-75315INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 754 754 - SAPK-75413INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') = '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 4.3] FI-FIO-GL-TRA 0003530544 - [CVE-2025-42899] Missing Authorization check in SAP S4CORE (Manage Journal Entries) (Version 0006) (Medium) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42899] FI-FIO-GL-TRA - Note 0003530544 exists" id="0003530544" operator="check_note">
      <compliant>NOTE = '0003530544' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 4.3] [CVE-2025-42899] FI-FIO-GL-TRA - Note 0003530544 missing and applicable using Correction Instruction" id="0003530544" operator="check_note:0003530544">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 104 104 - ALL_SP  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 105 105 - ALL_SP  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 106 106 - ALL_SP  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 107 107 - ALL_SP  -->
          or
		  ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0999' )  
        <!-- S4CORE 108 108 - ALL_SP  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO LOW -->
  <!-- [p4-CVSS 3.1] OPU-GW-COR 0003426825 - [CVE-2025-23191] Cache Poisoning through header manipulation vulnerability in SAP Fiori for SAP ERP (Version 0011) (Low) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 exists" id="0003426825" operator="check_note">
      <compliant>NOTE = '0003426825' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 missing and solution with SP available" id="0003426825" operator="check_note:0003426825">
      <compliant>(
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_GWFND 740 SAPK-74033INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0032' )   ) 
        <!-- SAP_GWFND 750 SAPK-75032INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0020' )   ) 
        <!-- SAP_GWFND 751 SAPK-75120INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_GWFND 752 SAPK-75216INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_GWFND 753 SAPK-75314INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_GWFND 740 SAPK-74033INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0032' )  
        <!-- SAP_GWFND 750 SAPK-75032INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0020' )  
        <!-- SAP_GWFND 751 SAPK-75120INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_GWFND 752 SAPK-75216INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_GWFND 753 SAPK-75314INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_GWFND 754 SAPK-75412INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_GWFND 755 SAPK-75510INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_GWFND 756 SAPK-75608INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_GWFND 757 SAPK-75706INSAPGWFND -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_GWFND 758 SAPK-75804INSAPGWFND -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 3.1] [CVE-2025-23191] OPU-GW-COR - Note 0003426825 missing and applicable using Correction Instruction" id="0003426825" operator="check_note:0003426825">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '740' and lpad(SP,4,'0') between '0012' and '0032' )  
        <!-- SAP_GWFND 740 SAPK-74012INSAPGWFND - SAPK-74032INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0031' )  
        <!-- SAP_GWFND 750 SAPK-75004INSAPGWFND - SAPK-75031INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '750' and lpad(SP,4,'0') between '0004' and '0032' )  
        <!-- SAP_GWFND 750 SAPK-75004INSAPGWFND - SAPK-75032INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0019' )  
        <!-- SAP_GWFND 751 751 - SAPK-75119INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '752' and lpad(SP,4,'0') between '0011' and '0015' )  
        <!-- SAP_GWFND 752 SAPK-75211INSAPGWFND - SAPK-75215INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '753' and lpad(SP,4,'0') between '0009' and '0013' )  
        <!-- SAP_GWFND 753 SAPK-75309INSAPGWFND - SAPK-75313INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '754' and lpad(SP,4,'0') between '0007' and '0011' )  
        <!-- SAP_GWFND 754 SAPK-75407INSAPGWFND - SAPK-75411INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '755' and lpad(SP,4,'0') between '0005' and '0009' )  
        <!-- SAP_GWFND 755 SAPK-75505INSAPGWFND - SAPK-75509INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0007' )  
        <!-- SAP_GWFND 756 756 - SAPK-75607INSAPGWFND  -->
         or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0005' )  
        <!-- SAP_GWFND 757 757 - SAPK-75705INSAPGWFND  -->
          or
		  ( COMPONENT = 'SAP_GWFND' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0003' )  
        <!-- SAP_GWFND 758 758 - SAPK-75803INSAPGWFND  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p4-CVSS 2.7] BC-SRV-DX-DXW 0003634053 - [CVE-2025-42883] Insecure File Operations vulnerability in SAP NetWeaver Application Server for ABAP (Migration Workbench) (Version 0006) (Low) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42883] BC-SRV-DX-DXW - Note 0003634053 exists" id="0003634053" operator="check_note">
      <compliant>NOTE = '0003634053' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42883] BC-SRV-DX-DXW - Note 0003634053 missing and solution with SP available" id="0003634053" operator="check_note:0003634053">
      <compliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0044' )   ) 
        <!-- SAP_BASIS 700 SAPKB70044 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0029' )   ) 
        <!-- SAP_BASIS 701 SAPKB70129 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0038' )   ) 
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 740 SAPKB74035 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0035' )   ) 
        <!-- SAP_BASIS 750 SAPK-75035INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0022' )   ) 
        <!-- SAP_BASIS 751 SAPK-75122INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 753 SAPK-75316INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 754 SAPK-75414INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 755 SAPK-75512INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 756 SAPK-75610INSAPBASIS -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
		 )
      </compliant>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0044' )  
        <!-- SAP_BASIS 700 SAPKB70044 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0029' )  
        <!-- SAP_BASIS 701 SAPKB70129 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0038' )  
        <!-- SAP_BASIS 731 SAPKB73138 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 740 SAPKB74035 -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0035' )  
        <!-- SAP_BASIS 750 SAPK-75035INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0022' )  
        <!-- SAP_BASIS 751 SAPK-75122INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 753 SAPK-75316INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 754 SAPK-75414INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 755 SAPK-75512INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 756 SAPK-75610INSAPBASIS -->
         or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p4-CVSS 2.7] [CVE-2025-42883] BC-SRV-DX-DXW - Note 0003634053 missing and applicable using Correction Instruction" id="0003634053" operator="check_note:0003634053">
      <compliant/>
      <noncompliant>(
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0011' and '0043' )  
        <!-- SAP_BASIS 700 SAPKB70011 - SAPKB70043  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0000' and '0028' )  
        <!-- SAP_BASIS 701 701 - SAPKB70128  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0001' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70201 - SAPKB70227  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0001' and '0037' )  
        <!-- SAP_BASIS 731 SAPKB73101 - SAPKB73137  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0000' and '0034' )  
        <!-- SAP_BASIS 740 740 - SAPKB74034  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0000' and '0034' )  
        <!-- SAP_BASIS 750 750 - SAPK-75034INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0000' and '0021' )  
        <!-- SAP_BASIS 751 751 - SAPK-75121INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- SAP_BASIS 752 752 - SAPK-75217INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 753 753 - SAPK-75315INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0013' )  
        <!-- SAP_BASIS 754 754 - SAPK-75413INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0011' )  
        <!-- SAP_BASIS 755 755 - SAPK-75511INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0009' )  
        <!-- SAP_BASIS 756 756 - SAPK-75609INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
		  ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') = '0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
		 )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42880] SV-SMG-SVD-SWB - Note 0003685270 exists" id="0003685270" operator="check_note">
      <compliant>NOTE = '0003685270' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p1-CVSS 9.9] [CVE-2025-42880] SV-SMG-SVD-SWB - Note 0003685270 missing and applicable using Correction Instruction" id="0003685270" operator="check_note:0003685270">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'ST' and VERSION = '720' and lpad(SP,4,'0') between '0003' and '0021' )  
        <!-- ST 720 SAPK-72003INSTMAIN - SAPK-72021INSTMAIN  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO HIGH -->
  <!-- [p2-CVSS 8.2] BC-CST-IC 0003684682 - [CVE-2025-42878] Sensitive Data Exposure in SAP Web Dispatcher and Internet Communication Manager (ICM) (Version 25) -->
  <!-- ABAP Kernel -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p2-CVSS 8.2] [CVE-2025-42878] BC-CST-IC - Kernel patch required for SNote 3684682v25" id="0003684682_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') between '0000' and '9999'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') between '0000' and '9999'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE like '722%'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE like '722%'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.2] [CVE-2025-42878] BC-CST-IC - Kernel patch required for SNote 3684682v25" id="0003684682_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') between '0000' and '9999'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') between '0000' and '9999'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.2] [CVE-2025-42878] BC-CST-IC - Kernel patch required for SNote 3684682v25" id="0003684682_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') between '0000' and '9999'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') between '0000' and '9999' </noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.2] [CVE-2025-42878] BC-CST-IC - Kernel patch required for SNote 3684682v25" id="0003684682_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') between '0000' and '9999'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') between '0000' and '9999'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.2] [CVE-2025-42878] BC-CST-IC - Kernel patch required for SNote 3684682v25" id="0003684682_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') between '0000' and '9999'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') between '0000' and '9999'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.2] [CVE-2025-42878] BC-CST-IC - Kernel patch required for SNote 3684682v25" id="0003684682_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') between '0000' and '9999'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') between '0000' and '9999'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 8.2] [CVE-2025-42878] BC-CST-IC - Kernel patch required for SNote 3684682v25" id="0003684682_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') between '0000' and '9999'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') between '0000' and '9999'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p2-CVSS 7.5] 0003677544 BC-CST-IC - [CVE-2025-42877] Memory Corruption vulnerability in SAP Web Dispatcher, Internet Communication Manager and SAP Content Server (Version 11)-->
  <!-- ABAP Kernel -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3677544v11" id="0003677544_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1528'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '1528'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p2-CVSS 7.5] Kernel patch required for SNote 3677544v11" id="0003677544_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0625'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0625'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- ABAP -->
  <!-- [p2-CVSS 7.1] FI-GL-GL-G 0003672151 - [CVE-2025-42876] Missing Authorization Check in SAP S/4 HANA Private Cloud (Financials General Ledger) (Version 10) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p2-CVSS 7.1] [CVE-2025-42876] FI-GL-GL-G - Note 0003672151 exists" id="0003672151" operator="check_note">
      <compliant>NOTE = '0003672151' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.1] [CVE-2025-42876] FI-GL-GL-G - Note 0003672151 missing and solution with SP available" id="0003672151" operator="check_note:0003672151">
      <compliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- S4CORE 109 SAPK-10901INS4CORE -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- S4CORE 104 SAPK-10413INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- S4CORE 105 SAPK-10511INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- S4CORE 106 SAPK-10609INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- S4CORE 107 SAPK-10707INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- S4CORE 108 SAPK-10805INS4CORE -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- S4CORE 109 SAPK-10901INS4CORE -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p2-CVSS 7.1] [CVE-2025-42876] FI-GL-GL-G - Note 0003672151 missing and applicable using Correction Instruction" id="0003672151" operator="check_note:0003672151">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'S4CORE' and VERSION = '104' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- S4CORE 104 104 - SAPK-10412INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '105' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- S4CORE 105 105 - SAPK-10510INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '106' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- S4CORE 106 106 - SAPK-10608INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '107' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- S4CORE 107 107 - SAPK-10706INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '108' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- S4CORE 108 108 - SAPK-10804INS4CORE  -->
          or
      ( COMPONENT = 'S4CORE' and VERSION = '109' and lpad(SP,4,'0') = '0000' )  
        <!-- S4CORE 109 109 - 109  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- PRIO MEDIUM -->
  <!-- ABAP -->
  <!-- [p3-CVSS 6.6] BC-MID-ICF 0003591163 - [CVE-2025-42875] Missing Authentication check in SAP NetWeaver Internet Communication Framework (Version 8)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42875] BC-MID-ICF - Note 0003591163 exists" id="0003591163" operator="check_note">
      <compliant>NOTE = '0003591163' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42875] BC-MID-ICF - Note 0003591163 missing and solution with SP available" id="0003591163" operator="check_note:0003591163">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and not( (lpad(SP,4,'0'))  &lt; '0043' )   ) 
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and not( (lpad(SP,4,'0'))  &lt; '0028' )   ) 
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and not( (lpad(SP,4,'0'))  &lt; '0037' )   ) 
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and not( (lpad(SP,4,'0'))  &lt; '0034' )   ) 
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and not( (lpad(SP,4,'0'))  &lt; '0033' )   ) 
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and not( (lpad(SP,4,'0'))  &lt; '0021' )   ) 
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0017' )   ) 
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0014' )   ) 
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0012' )   ) 
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0010' )   ) 
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0008' )   ) 
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0006' )   ) 
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0004' )   ) 
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and (lpad(SP,4,'0'))  &lt; '0043' )  
        <!-- SAP_BASIS 700 SAPKB70043 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 701 SAPKB70128 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and (lpad(SP,4,'0'))  &lt; '0028' )  
        <!-- SAP_BASIS 702 SAPKB70228 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and (lpad(SP,4,'0'))  &lt; '0037' )  
        <!-- SAP_BASIS 731 SAPKB73137 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and (lpad(SP,4,'0'))  &lt; '0034' )  
        <!-- SAP_BASIS 740 SAPKB74034 -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and (lpad(SP,4,'0'))  &lt; '0033' )  
        <!-- SAP_BASIS 750 SAPK-75033INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and (lpad(SP,4,'0'))  &lt; '0021' )  
        <!-- SAP_BASIS 751 SAPK-75121INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0017' )  
        <!-- SAP_BASIS 752 SAPK-75217INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0014' )  
        <!-- SAP_BASIS 753 SAPK-75314INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0012' )  
        <!-- SAP_BASIS 754 SAPK-75412INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0010' )  
        <!-- SAP_BASIS 755 SAPK-75510INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0008' )  
        <!-- SAP_BASIS 756 SAPK-75608INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0006' )  
        <!-- SAP_BASIS 757 SAPK-75706INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0004' )  
        <!-- SAP_BASIS 758 SAPK-75804INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 6.6] [CVE-2025-42875] BC-MID-ICF - Note 0003591163 missing and applicable using Correction Instruction" id="0003591163" operator="check_note:0003591163">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '700' and lpad(SP,4,'0') between '0035' and '0042' )  
        <!-- SAP_BASIS 700 SAPKB70035 - SAPKB70042  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '701' and lpad(SP,4,'0') between '0020' and '0027' )  
        <!-- SAP_BASIS 701 SAPKB70120 - SAPKB70127  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '702' and lpad(SP,4,'0') between '0020' and '0027' )  
        <!-- SAP_BASIS 702 SAPKB70220 - SAPKB70227  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '731' and lpad(SP,4,'0') between '0019' and '0036' )  
        <!-- SAP_BASIS 731 SAPKB73119 - SAPKB73136  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '740' and lpad(SP,4,'0') between '0016' and '0033' )  
        <!-- SAP_BASIS 740 SAPKB74016 - SAPKB74033  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '750' and lpad(SP,4,'0') between '0012' and '0032' )  
        <!-- SAP_BASIS 750 SAPK-75012INSAPBASIS - SAPK-75032INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '751' and lpad(SP,4,'0') between '0007' and '0020' )  
        <!-- SAP_BASIS 751 SAPK-75107INSAPBASIS - SAPK-75120INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0002' and '0016' )  
        <!-- SAP_BASIS 752 SAPK-75202INSAPBASIS - SAPK-75216INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0001' and '0013' )  
        <!-- SAP_BASIS 753 SAPK-75301INSAPBASIS - SAPK-75313INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0001' and '0011' )  
        <!-- SAP_BASIS 754 SAPK-75401INSAPBASIS - SAPK-75411INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0001' and '0009' )  
        <!-- SAP_BASIS 755 SAPK-75501INSAPBASIS - SAPK-75509INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0007' )  
        <!-- SAP_BASIS 756 SAPK-75601INSAPBASIS - SAPK-75607INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- SAP_BASIS 757 SAPK-75701INSAPBASIS - SAPK-75705INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0001' and '0003' )  
        <!-- SAP_BASIS 758 SAPK-75801INSAPBASIS - SAPK-75803INSAPBASIS  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- ABAP Kernel -->
  <!-- [p3-CVSS 6.5] BC-ABA-LI 0003662324 - [CVE-2025-42904] Information Disclosure vulnerability in Application Server ABAP (Version 8)  -->
  <configstore name="SAP_KERNEL">
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '1514'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') &lt;'1514'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '753_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0610'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and not lpad(VALUE,4,'0') &lt;'0610' </noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '754_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0828'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0828'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '777_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0425'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0425'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '789_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0321'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0321'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '793_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0040'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0040'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '914_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0025'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0025'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '915_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
    <checkitem desc="[p3-CVSS 6.5] Kernel patch required for SNote 3662324v8" id="0003662324_k">
      <compliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &gt;= '0061'</compliant>
      <noncompliant>NAME = 'KERN_PATCHLEVEL' and lpad(VALUE,4,'0') &lt; '0061'</noncompliant>
      <joinstore name="SAP_KERNEL" no_data_found="Yes">
        <joincompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joincompliant>
        <joinnoncompliant>NAME = 'KERN_REL' and VALUE = '916_REL'</joinnoncompliant>
      </joinstore>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.9] CA-UI5-CTR-ROD 0003676970 - [CVE-2025-42873] Denial of Service (DoS) in SAPUI5 framework (Markdown-it component) (Version 1)  -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.9] [CVE-2025-42873] CA-UI5-CTR-ROD - Note 0003676970 exists" id="0003676970" operator="check_note">
      <compliant>NOTE = '0003676970' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.9] [CVE-2025-42873] CA-UI5-CTR-ROD - Note 0003676970 missing and applicable using Correction Instruction" id="0003676970" operator="check_note:0003676970">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_UI' and VERSION = '755' and lpad(SP,4,'0') between '0001' and '0015' )  
        <!-- SAP_UI 755 SAPK-75501INSAPUI - SAPK-75515INSAPUI manual -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '756' and lpad(SP,4,'0') between '0001' and '0012' )  
        <!-- SAP_UI 756 SAPK-75601INSAPUI - SAPK-75612INSAPUI manual -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '757' and lpad(SP,4,'0') between '0001' and '0009' )  
        <!-- SAP_UI 757 SAPK-75701INSAPUI - SAPK-75709INSAPUI manual -->
          or
      ( COMPONENT = 'SAP_UI' and VERSION = '758' and lpad(SP,4,'0') between '0001' and '0005' )  
        <!-- SAP_UI 758 SAPK-75801INSAPUI - SAPK-75805INSAPUI manual -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <!-- [p3-CVSS 5.5] BC-EIM-ESH 0003659117 - [CVE-2025-42891] Missing Authorization check in SAP Enterprise Search for ABAP (Version 6) -->
  <configstore name="ABAP_NOTES">
    <checkitem desc="[p3-CVSS 5.5] [CVE-2025-42891] BC-EIM-ESH - Note 0003659117 exists" id="0003659117" operator="check_note">
      <compliant>NOTE = '0003659117' and PRSTATUS = 'E'</compliant>
      <noncompliant/>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] [CVE-2025-42891] BC-EIM-ESH - Note 0003659117 missing and solution with SP available" id="0003659117" operator="check_note:0003659117">
      <compliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and not( (lpad(SP,4,'0'))  &lt; '0018' )   ) 
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and not( (lpad(SP,4,'0'))  &lt; '0016' )   ) 
        <!-- SAP_BASIS 753 SAPK-75316INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and not( (lpad(SP,4,'0'))  &lt; '0013' )   ) 
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and not( (lpad(SP,4,'0'))  &lt; '0011' )   ) 
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and not( (lpad(SP,4,'0'))  &lt; '0009' )   ) 
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and not( (lpad(SP,4,'0'))  &lt; '0007' )   ) 
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and not( (lpad(SP,4,'0'))  &lt; '0005' )   ) 
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and not( (lpad(SP,4,'0'))  &lt; '0001' )   ) 
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </compliant>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and (lpad(SP,4,'0'))  &lt; '0018' )  
        <!-- SAP_BASIS 752 SAPK-75218INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and (lpad(SP,4,'0'))  &lt; '0016' )  
        <!-- SAP_BASIS 753 SAPK-75316INSAPBASIS -->
         or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and (lpad(SP,4,'0'))  &lt; '0013' )  
        <!-- SAP_BASIS 754 SAPK-75413INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and (lpad(SP,4,'0'))  &lt; '0011' )  
        <!-- SAP_BASIS 755 SAPK-75511INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and (lpad(SP,4,'0'))  &lt; '0009' )  
        <!-- SAP_BASIS 756 SAPK-75609INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and (lpad(SP,4,'0'))  &lt; '0007' )  
        <!-- SAP_BASIS 757 SAPK-75707INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and (lpad(SP,4,'0'))  &lt; '0005' )  
        <!-- SAP_BASIS 758 SAPK-75805INSAPBASIS -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and (lpad(SP,4,'0'))  &lt; '0001' )  
        <!-- SAP_BASIS 816 SAPK-81601INSAPBASIS -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
  <configstore name="COMP_LEVEL">
    <checkitem desc="[p3-CVSS 5.5] [CVE-2025-42891] BC-EIM-ESH - Note 0003659117 missing and applicable using Correction Instruction" id="0003659117" operator="check_note:0003659117">
      <compliant/>
      <noncompliant>(
      ( COMPONENT = 'SAP_BASIS' and VERSION = '752' and lpad(SP,4,'0') between '0000' and '0017' )  
        <!-- SAP_BASIS 752 752 - SAPK-75217INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '753' and lpad(SP,4,'0') between '0000' and '0015' )  
        <!-- SAP_BASIS 753 753 - SAPK-75315INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '754' and lpad(SP,4,'0') between '0000' and '0012' )  
        <!-- SAP_BASIS 754 754 - SAPK-75412INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '755' and lpad(SP,4,'0') between '0000' and '0010' )  
        <!-- SAP_BASIS 755 755 - SAPK-75510INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '756' and lpad(SP,4,'0') between '0000' and '0008' )  
        <!-- SAP_BASIS 756 756 - SAPK-75608INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '757' and lpad(SP,4,'0') between '0000' and '0006' )  
        <!-- SAP_BASIS 757 757 - SAPK-75706INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '758' and lpad(SP,4,'0') between '0000' and '0004' )  
        <!-- SAP_BASIS 758 758 - SAPK-75804INSAPBASIS  -->
          or
      ( COMPONENT = 'SAP_BASIS' and VERSION = '816' and lpad(SP,4,'0') ='0000' )  
        <!-- SAP_BASIS 816 816 - 816  -->
     )
      </noncompliant>
    </checkitem>
  </configstore>
</targetsystem>