QwikSec

Security Database

CVE

CWE

Training

CVE-2022-28213

Published: Apr 12, 2022

Modified: Aug 3, 2024

PUBLISHED

Description

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.

Vendor	Product	Versions
SAP SE	SAP BusinessObjects Business Intelligence Platform	affected `420` affected `430`

Weaknesses (CWE)

References

https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html

x_refsource_MISC

https://launchpad.support.sap.com/#/notes/3055044

x_refsource_MISC

http://packetstormsecurity.com/files/167046/SAP-BusinessObjects-Intelligence-4.3-XML-Injection.html

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.