CVE-2022-31598
CVE-2022-31598
Vexday Risk Score
3Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS —EPSS 0.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
12 Jul 2022Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
Due to insufficient input validation, SAP Business Objects - version 420, allows an authenticated attacker to submit a malicious request through an allowed operation. On successful exploitation, an attacker can view or modify information causing a limited impact on confidentiality and integrity of the application.
Affected products
SAP SE · SAP Business ObjectsWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →