CVE-2022-39800

2022-10-1100:00:00

CWE-79

sap

www.cve.org

sap businessobjects

bi launchpad

script execution

vulnerability

network interaction

confidentiality

integrity

6.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

36.0%

JSON

SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.

CNA Affected

[
  {
    "vendor": "SAP SE",
    "product": "SAP BusinessObjects Business Intelligence Platform (BI LaunchPad)",
    "versions": [
      {
        "version": "< 420",
        "status": "affected"
      },
      {
        "version": "< 430",
        "status": "affected"
      }
    ]
  }
]