CVE-2022-32245 PUBLISHED

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compromising confidentiality but causing a limited impact on the availability of the application.

EPSS 0.60% · 69.4th percentile

Risk Scores

EPSS Score
0.60%
69.4th percentile

Affected Products

VendorProductVersions
SAP SESAP BusinessObjects Business Intelligence Platform (Open Document)420, 430
sapbusinessobjects_business_intelligence420, 430

Timeline

References

Open in Interactive Console →