SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
References
| Link | Resource |
|---|---|
| https://launchpad.support.sap.com/#/notes/3211161 | Permissions Required Vendor Advisory |
| https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
12 Oct 2022, 17:25
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:* cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:* |
|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 6.1 |
| CWE | CWE-79 | |
| References | (MISC) https://launchpad.support.sap.com/#/notes/3211161 - Permissions Required, Vendor Advisory | |
| References | (MISC) https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html - Vendor Advisory | |
| First Time |
Sap businessobjects Business Intelligence
Sap |
11 Oct 2022, 21:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-11 21:15
Updated : 2023-12-10 14:35
NVD link : CVE-2022-39800
Mitre link : CVE-2022-39800
CVE.ORG link : CVE-2022-39800
JSON object : View
Products Affected
sap
- businessobjects_business_intelligence
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')