CVE-2022-32245CWE-319

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information…

published August 9, 2022

CVSS
—
EPSS
1%
Percentile
44.1
In the wild
Unconfirmed
What it is

SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information plain text over the network. On successful exploitation, the attacker can view any data available for a business user and put load on the application by an automated attack. Thus, completely compromising confidentiality but causing a limited impact on the availability of the application.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00532 · 44.1th percentile
Weakness
CWE-319 · Cleartext Transmission of Sensitive Information
Published
2022-08-09T20:13Z
EPSS history
Timeline
  • 09 AUG 20:13Z
    SAP BusinessObjects Business Intelligence Platform (Open Document) - versions 420, 430, allows an unauthenticated attacker to retrieve sensitive information…
    cvelistv5