Vulnerability · Published Dec 12, 2022 · Assigned by sap
CVE-2022-31596
Medium 6.0
In plain English
A medium-severity security flaw in SAP Business Objects Platform (Monitoring DB) from SAP. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).
Official description
Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - version 430, can access BOE Monitoring database to retrieve and modify (non-personal) system data which would otherwise be restricted. Also, a potential attack could be used to leave the CMS's scope and impact the database. A successful attack could have a low impact on confidentiality, a high impact on integrity, and a low impact on availability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SAP | SAP Business Objects Platform (Monitoring DB) | 430 |
Weakness: CWE-668 · Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:H/A:L