Skip to content
OpenAdvisories
Unscored CVE-2022-32245 EUVD-2022-53442GHSA-5jjr-9ghm-5r56

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sens…

Published Aug 9, 2022 · Updated Aug 3, 2024 · Assigned by sap

Description

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compromising confidentiality but causing a limited impact on the availability of the application.

Affected products

VendorProductAffectedFixed
SAP SE SAP BusinessObjects Business Intelligence Platform (Open Document) 420, 430 —

References