CVE-2022-41203

🗓️ 08 Nov 2022 00:00:00Reported by sapType

cve🔗 web.nvd.nist.gov📰️ 2 Media mentions👁 106 Views

In SAP BusinessObjects BI Platform, authenticated low privilege attacker can perform object substitution leading to deserialization vulnerability

Reporter	Title	Published	Views	Family All 15
Circl	CVE-2022-41203	9 Nov 202200:41	–	circl
CNNVD	SAP BusinessObjects BI Platform 代码问题漏洞	8 Nov 202200:00	–	cnnvd
CNVD	SAP BusinessObjects BI Platform Deserialization Vulnerability	10 Nov 202200:00	–	cnvd
Cvelist	CVE-2022-41203	8 Nov 202200:00	–	cvelist
EUVD	EUVD-2022-44444	3 Oct 202520:07	–	euvd
NCSC	Vulnerabilities fixed in SAP products	8 Nov 202200:00	–	ncsc
NCSC	Vulnerabilities fixed in SAP products	10 Jan 202300:00	–	ncsc
NVD	CVE-2022-41203	8 Nov 202222:15	–	nvd
OSV	CVE-2022-41203	8 Nov 202222:15	–	osv
Prion	Deserialization of untrusted data	8 Nov 202222:15	–	prion

NVD

Vulners

Node

sap businessobjects_business_intelligenceMatch4.2-

sap businessobjects_business_intelligenceMatch4.3

[
  {
    "vendor": "SAP SE",
    "product": "SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)",
    "versions": [
      {
        "version": "= 4.2",
        "status": "affected"
      },
      {
        "version": "= 4.3",
        "status": "affected"
      }
    ]
  }
]

Source	Link
launchpad	www.launchpad.support.sap.com/
sap	www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

17 Jun 2026 05:02Current

8.6High risk

Vulners AI Score8.6

CVSS 3.18.8

CVSS 39.9

EPSS0.00924

SSVC

CWE-502

sap businessobjects bi platform central management console bi launchpad authenticated attacker low privileges deserialization vulnerability cve-2022-41203