CVE-2022-41206: SAP Businessobjects Business Intelligence

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

SAP BusinessObjects Business Intelligence platform (Analysis for OLAP) - versions 420, 430, allows an authenticated attacker to send user-controlled inputs when OLAP connections are created and edited in the Central Management Console. On successful exploitation, there could be a limited impact on confidentiality and integrity of the application.

Affected products

• SAP Businessobjects Business Intelligence: version 420 only; version 430 only

Published 2022-10-11. Last modified 2026-06-17.