CVE-2022-39800

2022-10-1121:15:14

CWE-79

[email protected]

web.nvd.nist.gov

sap

businessobjects

launchpad

vulnerability

versions

network

exploitation

attacker

confidentiality

integrity

CVSS3

6.1

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

CHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS

0.001

Percentile

35.9%

JSON

SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.

Affected configurations

Nvd

Node

sapbusinessobjects_business_intelligenceMatch420

sapbusinessobjects_business_intelligenceMatch430

VendorProductVersionCPE
sapbusinessobjects_business_intelligence420cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*
sapbusinessobjects_business_intelligence430cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
sap	businessobjects_business_intelligence	420	cpe:2.3:a:sap:businessobjects_business_intelligence:420:::::::*
sap	businessobjects_business_intelligence	430	cpe:2.3:a:sap:businessobjects_business_intelligence:430:::::::*