Unrated severityNVD Advisory· Published Nov 8, 2022· Updated May 1, 2025
CVE-2022-41203
CVE-2022-41203
Description
In some workflow of SAP BusinessObjects BI Platform (Central Management Console and BI LaunchPad), an authenticated attacker with low privileges can intercept a serialized object in the parameters and substitute with another malicious serialized object, which leads to deserialization of untrusted data vulnerability. This could highly compromise the Confidentiality, Integrity, and Availability of the system.
Affected products
2- SAP SE/SAP BusinessObjects Business Intelligence Platform (Central Management Console and BI Launchpad)v5Range: = 4.2
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2News mentions
0No linked articles in our index yet.