CVE-2022-31596: SAP Business Objects Business Intelligence Platform

Medium severity, CVSS 6.0. EPSS: 0.7% chance of exploitation in the next 30 days.

Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - version 430, can access BOE Monitoring database to retrieve and modify (non-personal) system data which would otherwise be restricted. Also, a potential attack could be used to leave the CMS's scope and impact the database. A successful attack could have a low impact on confidentiality, a high impact on integrity, and a low impact on availability.

Affected products

• SAP Business Objects Business Intelligence Platform: version 430 only

Published 2022-12-12. Last modified 2026-06-17.