Vulnetix
Try Vulnetix Request Demo
CVE-2022-35228 PUBLISHED CVSS 6.800000190734863 MEDIUM

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

EPSS 0.18% · 39.7th percentile

Risk Scores

CVSS v2.0
6.800000190734863
EPSS Score
0.18%
39.7th percentile

Affected Products

VendorProductVersions
sapbusinessobjects_business_intelligence_platform420, 430
SAP SESAP BusinessObjects Business Intelligence Platform (Central management Console)420, 430

Timeline

References

Open in Interactive Console →