CVE-2022-35228: SAP Businessobjects Business Intelligence Platform

High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days.

SAP BusinessObjects CMC allows an unauthenticated attacker to retrieve token information over the network which would otherwise be restricted. This can be achieved only when a legitimate user accesses the application and a local compromise occurs, like sniffing or social engineering. On successful exploitation, the attacker can completely compromise the application.

Affected products

• SAP Businessobjects Business Intelligence Platform: version 420 only; version 430 only

Published 2022-07-12. Last modified 2026-06-17.