CVE-2022-32246: SAP Business Objects Business Intelligence Platform

Medium severity, CVSS 4.6. EPSS: 0.5% chance of exploitation in the next 30 days.

SAP Busines Objects Business Intelligence Platform (Visual Difference Application) - versions 420, 430, allows an authenticated attacker who has access to BI admin console to send crafted queries and extract data from the SQL backend. On successful exploitation, the attacker can cause limited impact on confidentiality and integrity of the application

Affected products

• SAP Business Objects Business Intelligence Platform: version 420 only; version 430 only

Published 2022-07-12. Last modified 2026-06-17.