CVE-2022-35296

CVE-2022-35296

Vendor Sap Se
Product SAP BusinessObjects Business Intelligence Platform (Version Management System)
Weakness CWE-200 · Info exposure
Published October 11, 2022
Last update August 3, 2024
View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.

Key dates

02Disclosure timeline

October 11, 2022 CVE published
August 3, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2020-15235 Sensitive data exposure in RACTF CVE-2020-12518 Phoenix Contact PLCnext Control Devices versions before 2021.0 LTS: An attacker can use the knowledge gained by reading the insufficiently protected sensitive information to plan further attacks. CVE-2025-47980 Windows Imaging Component Information Disclosure Vulnerability CVE-2022-20811 Cisco TelePresence Collaboration Endpoint and RoomOS Software Vulnerabilities CVE-2024-23344 Tuleap's content of artifacts might be readable by unauthorized users