CVE-2022-28213

PoC —

CVSS 3.1

8.1 high

EPSS

12%p96

Published

Apr 12, 2022 (Apr 12, 2022)

Modified

Jun 17, 2026

Description

When a user access SOAP Web services in SAP BusinessObjects Business Intelligence Platform - version 420, 430, it does not sufficiently validate the XML document accepted from an untrusted source, which might result in arbitrary files retrieval from the server and in successful exploits of DoS.

Vendors: sap
Products: businessobjects business intelligence platform
Weakness: CWE-112
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (12.5%)

In the news0 stories

No ingested article mentions this CVE yet.