Vulnerability Details CVE-2022-32246
SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and extract data from the SQL backend. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the application
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 58.0%
CVSS Severity
CVSS v3 Score 4.6
CVSS v2 Score 4.9
References
Products affected by CVE-2022-32246
-
cpe:2.3:a:sap:business_objects_business_intelligence_platform:420
-
cpe:2.3:a:sap:business_objects_business_intelligence_platform:430