VYPR
← All advisories
High severity7.8NVD Advisory· Published May 11, 2022· Updated Jun 17, 2026

CVE-2022-28214

CVE-2022-28214

Description

During an update of SAP BusinessObjects Enterprise, Central Management Server (CMS) - versions 420, 430, authentication credentials are being exposed in Sysmon event logs. This Information Disclosure could cause a high impact on systems’ Confidentiality, Integrity, and Availability.

Affected products

6
  • SAP/BusinessObjects Enterprise XIllm-fuzzy
    Range: 420, 430
  • SAP/Businessobjects2 versions
    cpe:2.3:a:sap:businessobjects:420:*:*:*:enterprise:*:*:*+ 1 more
    • cpe:2.3:a:sap:businessobjects:420:*:*:*:enterprise:*:*:*
    • cpe:2.3:a:sap:businessobjects:430:*:*:*:enterprise:*:*:*
  • SAP/Businessobjects Business Intelligence2 versions
    cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:sap:businessobjects_business_intelligence:420:*:*:*:*:*:*:*
    • cpe:2.3:a:sap:businessobjects_business_intelligence:430:*:*:*:*:*:*:*
  • SAP SE/SAP BusinessObjects Enterprise (Central Management Server)v5
    Range: 420

Patches

Vulnerability mechanics

References

2

News mentions

0

No linked articles in our index yet.