{"id":"CVE-2022-35296","aliases":["EUVD-2022-38186","GHSA-q89h-8c3m-4535"],"status":"published","title":"Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...","description":"Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.","severity":{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00895,"percentile":0.59768,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2022-10-11T00:00:00Z","modified":"2026-06-17T04:51:44Z","products":[{"vendor":"sap","product":"businessobjects_business_intelligence"},{"vendor":"sap se","product":"sap businessobjects business intelligence platform (version management system)"},{"vendor":"sap_se","product":"sap businessobjects business intelligence platform (version management system)"}],"references":[{"url":"https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.html","tags":["x_transferred","Vendor Advisory"]},{"url":"https://launchpad.support.sap.com/#/notes/3233226","tags":["x_transferred","Permissions Required","Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-35296"},{"url":"https://github.com/advisories/GHSA-q89h-8c3m-4535"}],"sources":{"cve":[{"id":"CVE-2022-35296","description":"Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.","status":"published","published":"2022-10-11T00:00:00Z","modified":"2024-08-03T09:36:44.037Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:34:39.935681Z"}],"euvd":[{"id":"EUVD-2022-38186","description":"Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.","status":"published","published":"2022-10-11T00:00:00Z","modified":"2024-08-03T09:36:44Z","updated_at":"2026-11-03T03:25:27.391244Z"}],"ghsa":[{"id":"GHSA-q89h-8c3m-4535","title":"Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform ...","description":"Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.","status":"published","published":"2022-10-12T12:00:18Z","modified":"2023-02-03T05:02:09Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:53:06.797888Z"}],"nvd":[{"id":"CVE-2022-35296","description":"Under certain conditions, the application SAP BusinessObjects Business Intelligence Platform (Version Management System) exposes sensitive information to an actor over the network with high privileges that is not explicitly authorized to have access to that information, leading to a high impact on Confidentiality.","status":"published","published":"2022-10-11T21:15:13.187Z","modified":"2026-06-17T04:51:44.557Z","cvss":[{"version":"3.1","score":4.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:07:29.52424Z"}]}}