CVE-2022-32246

published 2022-07-12

CVE-2022-32246: SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI…

Priority P4 23 medium 4.6 CVSS 3.1

AV N AC L PR L UI R S U C L I L A N

SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and extract data from the SQL backend. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the application

Affected

4 ranges

Vendor	Product	Version range	Fixed in
sap	business_objects_business_intelligence_platform	—	—
sap	business_objects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—
sap_se	sap_businessobjects_business_intelligence_platform	—	—

CVSS provenance

nvd v3.1 4.6 MEDIUM CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

nvd v2.0 4.9 MEDIUM AV:N/AC:M/Au:S/C:P/I:P/A:N

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-89