CVE-2022-22541

SAP BusinessObjects Business Intelligence Platform - versions 420, 430, may allow legitimate users to access information they shouldn't see through relational or OLAP connections. The main impact is the disclosure of company data to people that shouldn't or don't need to have access.

• CWE-213

• https://launchpad.support.sap.com/#/notes/3137191Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• https://launchpad.support.sap.com/#/notes/3137191Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Apr 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-22536SAP NetWeaver Application Server ABAP, SAP NetWeaver Applica…10
• CVE-2022-22537When a user opens a manipulated Tagged Image File Format (.t…6.5
• CVE-2022-22538When a user opens a manipulated Adobe Illustrator file forma…6.5
• CVE-2022-22539When a user opens a manipulated JPEG file format (.jpg, 2d.x…6.5
• CVE-2022-2254A user with administrative privileges in Distributed Data Sy…4.8
• CVE-2022-22540SAP NetWeaver AS ABAP (Workplace Server) - versions 700, 701…7.5
• CVE-2022-22542S/4HANA Supplier Factsheet exposes the private address and b…6.5
• CVE-2022-22543SAP NetWeaver Application Server for ABAP (Kernel) and ABAP …7.5
• CVE-2022-22544Solution Manager (Diagnostics Root Cause Analysis Tools) - v…9.1
• CVE-2022-22545A high privileged user who has access to transaction SM59 ca…4.9
• CVE-2022-22546Due to improper HTML encoding in input control summary, an a…5.4
• CVE-2022-22547Simple Diagnostics Agent - versions 1.0 (up to version 1.57.…7.5