CVE-2022-28213: High severity sap businessobjects vulnerability
When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID of this issue?
The vulnerability ID of this issue is CVE-2022-28213.
What is the severity of CVE-2022-28213?
The severity of CVE-2022-28213 is high with a CVSS score of 8.1.
Which software versions are affected by CVE-2022-28213?
CVE-2022-28213 affects SAP BusinessObjects Business Intelligence Platform versions 420 and 430.
What is the impact of CVE-2022-28213?
CVE-2022-28213 could allow arbitrary file retrieval from the server and result in successful DoS attacks.
Are there any references or additional resources available for CVE-2022-28213?
Yes, you can find more information about CVE-2022-28213 at the following references: [Reference 1](http://packetstormsecurity.com/files/167046/SAP-BusinessObjects-Intelligence-4.3-XML-Injection.html), [Reference 2](https://launchpad.support.sap.com/#/notes/3055044), [Reference 3](https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html).