CVE-2022-32245

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compromising confidentiality but causing a limited impact on the availability of the application.

Score
CVSS 3.1 8.2 High
Status
Modified - cna@sap.com
Published
2022-08-10
Last modified
2024-08-03
Weaknesses
CWE-319

Affected products

References

 
 
© AVABIS GmbH privacypolicy about