CVE-2022-32245

HighCVSS 8.2/10Last modified Jun 17, 2026

Description

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compromising confidentiality but causing a limited impact on the availability of the application.

Metrics

CVSS 3.1 8.2/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:L

Weakness enumeration

CWE-319

Affected software

No affected versions have been published.

Timeline

Published: Aug 10, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-322464.6SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who CVE-2022-322476.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthe CVE-2022-322485.3Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could CVE-2022-322497.5Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to ga CVE-2022-32255.7Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.CVE-2022-322507.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privil CVE-2022-322519.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification fo CVE-2022-322527.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity ch CVE-2022-322537.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL cer CVE-2022-322547.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the ap CVE-2022-322555.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servic CVE-2022-322566.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servic