CVE-2022-31596 - CVE House

Back to Database

Status published Unknown CVE-2022-31596

Under certain conditions, an attacker authenticated as a CMS administrator...

0 CVSS

Vulnerability Description

Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - version 430, can access BOE Monitoring database to retrieve and modify (non-personal) system data which would otherwise be restricted. Also, a potential attack could be used to leave the CMS's scope and impact the database. A successful attack could have a low impact on confidentiality, a high impact on integrity, and a low impact on availability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-31596

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from SAP

View All →

HTTP Verb Tampering vulnerability in SAP CRM (WebClient UI)

DLL Hijacking vulnerability in SapSetup (Software Installation Program)

Directory/Path Traversal vulnerability in SAP NetWeaver.

Denial of Service (DOS) in SAP NetWeaver AS for ABAP (Business Server Pages)

Code Injection vulnerability in SAP Application Interface Framework (Message Monitoring)

Affected Vendor

SAP

View all reports →

Affected Software

SAP Business Objects Platform (Monitoring DB)

Vulnerable Versions:

430

Timeline

Official Publish: December 12th, 2022

Last Modified: April 22nd, 2025

Added to House: July 21st, 2026

CVSS Vectors

No vector data available

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application

T1213 Data from Information Repositories

T1005 Data from Local System

T1078 Valid Accounts