CVE-2022-41203criticalCWE-502

CVE-2022-41203: falha crítica em SAP BusinessObjects Business Intelligence…

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar SAP BusinessObjects Business Intelligence Platform

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

28Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 9.9epss 1.1%
In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which leads to deserialization of untrusted data vulnerability. This could highly compromise the Confidentiality, Integrity, and Availability of the system.
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
SAP SE · SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)