VDB

CVE-2022-31591

CVE-2022-31591 PUBLISHED CVSS 4.599999904632568 MEDIUM

SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service

EPSS 0.05% · 16.6th percentile

Risk Scores

CVSS v2.0
4.599999904632568
EPSS Score
0.05%
16.6th percentile

Affected Products

VendorProductVersions
sapbusinessobjects_bw_publisher_service420, 430
SAP SESAP BusinessObjects (BW Publisher Service)420, 430

Timeline

  • Jul 12, 2022 CVE Published
  • Jul 13, 2022 EPSS Score
  • Aug 30, 2022 EPSS Score
  • Oct 16, 2022 EPSS Score
  • Dec 2, 2022 EPSS Score
  • Jan 18, 2023 EPSS Score
  • Mar 6, 2023 EPSS Score
  • Mar 7, 2023 EPSS Score
  • Apr 22, 2023 EPSS Score
  • Jun 8, 2023 EPSS Score
  • Jul 25, 2023 EPSS Score
  • Sep 10, 2023 EPSS Score
Open in Interactive Console →
$ Console Community · 100/wk Open console ›