CVE-2022-31596

MEDIUM Year: 2022
CVSS v3 Score
6.0
Medium
Weakness Type
CWE-668
View all →

Vulnerability Description

Under certain conditions, an attacker authenticated as a CMS administrator and with high privileges access to the Network in SAP BusinessObjects Business Intelligence Platform (Monitoring DB) - version 430, can access BOE Monitoring database to retrieve and modify (non-personal) system data which would otherwise be restricted. Also, a potential attack could be used to leave the CMS's scope and impact the database. A successful attack could have a low impact on confidentiality, a high impact on integrity, and a low impact on availability.

Related Vulnerabilities

CVE-2019-12904

MEDIUM
CVSS:5.9(Medium)

In Libgcrypt 1.8.4, the C implementation of AES is vulnerable to a flush-and-reload side-channel attack because physical addresses are available to other processes. (The C implementation is used on pl...

CWE-6682019

CVE-2020-11934

MEDIUM
CVSS:5.9(Medium)

It was discovered that snapctl user-open allowed altering the $XDG_DATA_DIRS environment variable when calling the system xdg-open. OpenURL() in usersession/userd/launcher.go would alter $XDG_DATA_DIR...

CWE-6682020

CVE-2020-12020

MEDIUM
CVSS:6.1(Medium)

Baxter ExactaMix EM 2400 Versions 1.10, 1.11, and 1.13 and ExactaMix EM1200 Versions 1.1, 1.2, and 1.4 does not restrict non administrative users from gaining access to the operating system and editin...

CWE-6682020

CVE-2020-13946

MEDIUM
CVSS:5.9(Medium)

In Apache Cassandra, all versions prior to 2.1.22, 2.2.18, 3.0.22, 3.11.8 and 4.0-beta2, it is possible for a local attacker without access to the Apache Cassandra process or configuration files to ma...

CWE-6682020

CVE-2022-40234

MEDIUM
CVSS:5.9(Medium)

Versions of IBM Spectrum Protect Plus prior to 10.1.12 (excluding 10.1.12) include the private key information for a certificate inside the generated .crt file when uploading a TLS certificate to IBM ...

CWE-6682022

CVE-2016-5787

MEDIUM
CVSS:6.3(Medium)

General Electric (GE) Digital Proficy HMI/SCADA - CIMPLICITY before 8.2 SIM 27 mishandles service DACLs, which allows local users to modify a service configuration via unspecified vectors.

CWE-6682016