4.9

CVE-2022-35296

EPSS 0.38%
Veröffentlicht 11.10.2022 21:15:13
Zuletzt bearbeitet 21.11.2024 07:11:04
Quelle cna@sap.com
CVE-Watchlists
Login
Unerledigt
Login

Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 5

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

SAP ≫ Businessobjects Business Intelligence Version420

SAP ≫ Businessobjects Business Intelligence Version430

Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	0.38%	0.586

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
nvd@nist.gov	4.9	1.2	3.6	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

CWE-200 Exposure of Sensitive Information to an Unauthorized Actor

The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

Vendor Advisory

https://launchpad.support.sap.com/#/notes/3233226

Vendor Advisory

Permissions Required

https://nvd.nist.gov/vuln/detail/CVE-2022-35296

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2022-35296

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2022-35296

EUVD