CVE-2022-28213CWE-112

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML…

published April 12, 2022

CVSS

—

EPSS

12%

Percentile

96.2

In the wild

Unconfirmed

What it is

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.

The record

Technical detail

CVSS: Not scored
CVSS v4.0: Not supplied
EPSS: 0.12476 · 96.2th percentile
Weakness: CWE-112 · Missing XML Validation
Published: 2022-04-12T16:11Z

EPSS history

Timeline

12 APR 16:11Z
When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML…
cvelistv5