CVE-2022-35296

2022-10-1100:00:00

CWE-200

sap

www.cve.org

sap businessobjects

unauthorized access

sensitive information

high impact

confidentiality

5.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.4%

JSON

Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.

CNA Affected

[
  {
    "vendor": "SAP SE",
    "product": "SAP BusinessObjects Business Intelligence Platform (Version Management System)",
    "versions": [
      {
        "version": "420",
        "status": "affected"
      },
      {
        "version": "430",
        "status": "affected"
      }
    ]
  }
]