CVE-2022-32246

2022-07-1220:26:21

CWE-89

sap

www.cve.org

sap business objects

bi platform

sql injection

confidentiality

integrity

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

22.7%

JSON

SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and extract data from the SQL backend. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the application

CNA Affected

[
  {
    "product": "SAP BusinessObjects Business Intelligence Platform (Visual Difference Application)",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "420"
      },
      {
        "status": "affected",
        "version": "430"
      }
    ]
  }
]