CVE-2022-35169

SAP BusinessObjects Business Intelligence Platform (LCM) - versions 420, 430, allows an attacker with an admin privilege to read and decrypt LCMBIAR file's password under certain conditions, enabling the attacker to modify the password or import the file into another system causing high impact on confidentiality but a limited impact on the availability and integrity of the application.

• CWE-200

• https://launchpad.support.sap.com/#/notes/3194361Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory
• https://launchpad.support.sap.com/#/notes/3194361Permissions Required, Vendor Advisory
• https://www.sap.com/documents/2022/02/fa865ea4-167e-0010-bca6-c68f7e60039b.htmlVendor Advisory

Published

Jul 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-35163Complete Online Job Search System v1.0 was discovered to con…4.8
• CVE-2022-35164LibreDWG v0.12.4.4608 & commit f2dea29 was discovered to con…9.8
• CVE-2022-35165An issue in AP4_SgpdAtom::AP4_SgpdAtom() of Bento4-1.6.0-639…5.5
• CVE-2022-35166libjpeg commit 842c7ba was discovered to contain an infinite…5.5
• CVE-2022-35167Printix Cloud Print Management v1.3.1149.0 for Windows was d…8.8
• CVE-2022-35168Due to improper input sanitization of XML input in SAP Busin…7.5
• CVE-2022-3517A vulnerability was found in the minimatch package. This fla…7.5
• CVE-2022-35170SAP NetWeaver Enterprise Portal does - versions 7.10, 7.11, …6.1
• CVE-2022-35171When a user opens manipulated JPEG 2000 (.jp2, jp2k.x3d) fil…5.5
• CVE-2022-35172SAP NetWeaver Enterprise Portal - versions 7.10, 7.11, 7.20,…6.1
• CVE-2022-35173An issue was discovered in Nginx NJS v0.7.5. The JUMP offset…7.5
• CVE-2022-35174A stored cross-site scripting (XSS) vulnerability in Kirby's…5.4