← All advisories

Medium severity6.5NVD Advisory· Published Apr 12, 2022· Updated Jun 17, 2026

CVE-2022-27671

CVE-2022-27671

Description

A CSRF token visible in the URL may possibly lead to information disclosure vulnerability.

Affected products

3

SAP/Businessobjects Business Intelligence Platform2 versions
cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:420:*:*:*:*:*:*:*
- cpe:2.3:a:sap:businessobjects_business_intelligence_platform:430:*:*:*:*:*:*:*
SAP SE/SAP BusinessObjects Business Intelligence Platformv5
Range: 420

Patches

Vulnerability mechanics

References

2

launchpad.support.sap.comnvdPermissions RequiredVendor Advisory
www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlnvdVendor Advisory

News mentions

0

No linked articles in our index yet.