VULNERABILITY INTELLIGENCE
CVE-2022-22541
CVSS score6.5 MEDIUM
EPSS probability0.79%
CISA KEVNot currently listed
Published2022-04-12
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Description
SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access.
Weakness classification
- cna@sap.com: CWE-213
- nvd@nist.gov: NVD-CWE-noinfo
Primary references
- cna@sap.com — Permissions Required, Vendor Advisory
- cna@sap.com — Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Permissions Required, Vendor Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Vendor Advisory