CVE-2022-22546: SAP Businessobjects Web Intelligence

Medium severity, CVSS 5.4. EPSS: 0.5% chance of exploitation in the next 30 days.

Due to improper HTML encoding in input control summary, an authorized attacker can execute XSS vulnerability in SAP Business Objects Web Intelligence (BI Launchpad) - version 420.

Affected products

• SAP Businessobjects Web Intelligence: version 420 only

Published 2022-02-09. Last modified 2026-06-17.