3740884 - How to report a Security issue for Incentive Management?

A potential security vulnerability or security incident has been identified while using one or more SAP Sales Performance Management applications in Production or lower (non‑production) environments, specifically one or more of the following:

• SAP Sales Performance Management
• Incentive Management
• Advanced Workflow
• Onboarding
• Agent Lifecycle Management 
• Agent Performance Management
• Agent Compliance
• Territory & Quota 
• SaaS LandingPad for Incentive Management on Legacy Oracle
• Embedded Analytics
• IAS
• SAP Crystal Reports in SAP Incentive Management, enterprise edition

Typical indicators may include:

• Unauthorized access to data or functionality
• Unexpected privilege escalation or role changes
• Suspicious API calls, background jobs, or workflow executions
• Unexplained configuration or master-data changes
• Data exposure, anomalous downloads, or integrity issues
• Findings from security scans or penetration tests related to the above applications

• SAP Sales Performance Management
• Incentive Management
• Incentive Management on Hyperscalers
• Incentive Management on Legacy Oracle
• Incentive Management on Legacy HANA 
• SaaS LandingPad for Incentive Management on Legacy Oracle
• Embedded Analytics
• IAS
• SAP Crystal Reports in SAP Incentive Management, enterprise edition

trust center, security issue incident, security issue management, SAP trust center, data leak, Unauthorized access, Data exposure, SAP Sales Performance Management, SAP Trust Center Security Incident Management, PSIRT, Production and non-production environments, Unauthorized access, Data exposure, SAP Incentive Management, SAP Territory and Quota, SAP Agent Lifecycle Management, SAP Agent Performance Management. , KBA , CEC-SAL-COM , Incentive Management , How To