PT-2022-24998 · Sap · Sap Businessobjects Bi Launchpad

Published 2022-10-11 · Updated 2022-11-10 · CVE-2022-39800

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI LaunchPad versions 420, 430

Description The issue is related to improper sanitization of user inputs, allowing an unauthenticated attacker to execute scripts. This can lead to viewing or modifying information, causing a limited impact on the confidentiality and integrity of the application.

Recommendations For SAP BusinessObjects BI LaunchPad versions 420, 430, update to a version that properly sanitizes user inputs to prevent script execution attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-39800

Affected Products

Sap Businessobjects Bi Launchpad

References · 6

• https://sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html · Vendor Advisory
• https://launchpad.support.sap.com/#/notes/3211161 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2022-39800 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-39800 · Security Note
• https://t.me/cibsecurity/51207 · Telegram Post
• https://t.me/cvenotify/37458 · Telegram Post