CVE-2022-31598

published 2022-07-12

CVE-2022-31598: Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed…

medium 5.4 CVSS 3.1

AV N AC L PR L UI R S C C L I L A N

Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sap	business_objects_business_intelligence_platform	—	—
sap_se	sap_business_objects	—	—

CWE-345