CVE-2022-32246

MediumCVSS 4.6/10Last modified Jun 17, 2026

Description

SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and extract data from the SQL backend. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the application

Metrics

CVSS 3.1 4.6/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SAP SE	SAP BusinessObjects Business Intelligence Platform (Visual Difference Application)	420; 430

References

https://launchpad.support.sap.com/#/notes/3203079Permissions Required, Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
https://launchpad.support.sap.com/#/notes/3203079Permissions Required, Vendor Advisory
https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Timeline

Published: Jul 12, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-322476.1SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20, 7.30, 7.31, 7.40, 7.50, is susceptible to script execution attack by an unauthe CVE-2022-322485.3Due to missing input validation in the Manage Checkbooks component of SAP S/4HANA - version 101, 102, 103, 104, 105, 106, an attacker could CVE-2022-322497.5Under special integration scenario of SAP Business one and SAP HANA - version 10.0, an attacker can exploit HANA cockpit�s data volume to ga CVE-2022-32255.7Improper Control of Dynamically-Managed Code Resources in GitHub repository budibase/budibase prior to 1.3.20.CVE-2022-322507.8net/netfilter/nf_tables_api.c in the Linux kernel through 5.18.1 allows a local user (able to create user/net namespaces) to escalate privil CVE-2022-322519.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). There is a missing authentication verification fo CVE-2022-322527.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The application does not perform the integrity ch CVE-2022-322537.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). Due to improper input validation, the OpenSSL cer CVE-2022-322547.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). A customized HTTP POST request could force the ap CVE-2022-322555.3A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servic CVE-2022-322566.5A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.1). The affected application consists of a web servic CVE-2022-322579.8A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2). The affected application consists of a web servic