CVE-2022-39800: XSS
SAP BusinessObjects BI LaunchPad - versions 420, 430, is susceptible to script execution attack by an unauthenticated attacker due to improper sanitization of the user inputs while interacting on the network. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-39800?
CVE-2022-39800 is a vulnerability in SAP BusinessObjects BI LaunchPad versions 420 and 430 that allows an unauthenticated attacker to execute malicious scripts by exploiting improper sanitization of user inputs.
What is the severity of CVE-2022-39800?
The severity of CVE-2022-39800 is medium with a CVSS score of 6.1.
How does CVE-2022-39800 affect SAP BusinessObjects BI LaunchPad?
CVE-2022-39800 affects SAP BusinessObjects BI LaunchPad versions 420 and 430 by enabling an attacker to view or modify information through script execution.
How can CVE-2022-39800 be exploited?
CVE-2022-39800 can be exploited by an unauthenticated attacker by submitting malicious scripts through user inputs on the network.
Is there a fix available for CVE-2022-39800?
Yes, SAP has released a fix for CVE-2022-39800. Customers should refer to the SAP support note [3211161](https://launchpad.support.sap.com/#/notes/3211161) for more information.