Hi all,

We are urgently searching for more information regarding the PHP vulnerability and its potential impact on Concur.  I've seen the statement from SAP, but we're really looking for a statement that addresses Concur specifically.  

These are the questions we're trying to answer (see below).  And yes, we've already opened up a ticket with Concur Support, but we've been warned we may not receive a response for several days. 

"Can we get affirmative confirmation that Concur is not impacted by this PHP vulnerability? And can Concur confirm that Concur does not use PHP for any modules, including Expense, Invoice, Travel, and Reporting, or any other part of their system?"