CVE-2022-41206: XSS

Published Oct 11, 2022

Updated

SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430, allows an authenticated attacker to send user-controlled inputs when OLAP connections are created and edited in the Central Management Console. On successful exploitation, there could be a limited impact on confidentiality and integrity of the application.

Affected Software

2 affected components

SAP BusinessObjects Business Intelligence=420

SAP BusinessObjects Business Intelligence=430

Event History

Oct 11, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

DescriptionWeakness

Data Sourced

via NVD·09:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the vulnerability ID for this SAP BusinessObjects Business Intelligence platform vulnerability?

The vulnerability ID for this SAP BusinessObjects Business Intelligence platform vulnerability is CVE-2022-41206.

What is the severity of CVE-2022-41206?

The severity of CVE-2022-41206 is medium with a CVSS score of 5.4.

What is the affected software for CVE-2022-41206?

The affected software for CVE-2022-41206 is SAP BusinessObjects Business Intelligence platform versions 420 and 430.

How can an attacker exploit CVE-2022-41206?

An authenticated attacker can exploit CVE-2022-41206 by sending user-controlled inputs when creating or editing OLAP connections in the Central Management Console.

What is the impact of successfully exploiting CVE-2022-41206?

The impact of successfully exploiting CVE-2022-41206 is limited.