[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fsK0WarlPTEVx_sJFvPkHaN0D7MdjtuOVgkB1yM-J8oM":3,"g5a-risk:CVE-2022-31591":113},{"success":4,"data":5,"meta":111},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":39,"epssPercentile":26,"epssTimeSeries":40,"severity":41,"affectedProducts":42,"affectedProductsCount":51,"references":52,"referencesCount":51,"weaknesses":62,"weaknessesCount":71,"isActivelyExploited":72,"cisaInfo":26,"otxData":26,"relatedBlogPosts":73,"seoMetadata":74,"configurations":99,"relatedVendorCves":109,"notableEvents":110},"CVE-2022-31591","What is CVE-2022-31591?","SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privileges by inserting an executable file in the path of the affected service","SAP BusinessObjects BW Publisher Service - versions 420, 430, uses a search path that contains an unquoted element. A local attacker can gain elevated privil...","2022-07-12T21:15:09.973","2022-07-16T02:23:38.557",7.8,"CVSS:3.1\u002FAV:L\u002FAC:L\u002FPR:L\u002FUI:N\u002FS:U\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":22,"UserInteraction":23,"Scope":24,"ConfidentialityImpact":25,"IntegrityImpact":25,"AvailabilityImpact":25,"BaseScore":12,"BaseSeverity":25,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":25,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","LOCAL","LOW","NONE","UNCHANGED","HIGH",null,1.8,5.9,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":36,"ExploitabilityScore":37,"ImpactScore":38,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":23,"ConfidentialityImpact":34,"IntegrityImpact":34,"AvailabilityImpact":34,"BaseScore":35,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:L\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P","PARTIAL",4.6,"MEDIUM",3.9,6.4,0.00254,[39,39,39,39,39,39,39],"High",[43,48],{"vendor":44,"product":45,"version":46,"criteria":47,"vulnerable":4},"sap","businessobjects_bw_publisher_service","420","cpe:2.3:a:sap:businessobjects_bw_publisher_service:420:*:*:*:*:*:*:*",{"vendor":44,"product":45,"version":49,"criteria":50,"vulnerable":4},"430","cpe:2.3:a:sap:businessobjects_bw_publisher_service:430:*:*:*:*:*:*:*",2,[53,59],{"url":54,"source":55,"tags":56},"https:\u002F\u002Flaunchpad.support.sap.com\u002F#\u002Fnotes\u002F3167430","Sap",[57,58],"Permissions Required","Vendor Advisory",{"url":60,"source":55,"tags":61},"https:\u002F\u002Fwww.sap.com\u002Fdocuments\u002F2022\u002F02\u002Ffa865ea4-167e-0010-bca6-c68f7e60039b.html",[58],[63],{"id":64,"name":65,"description":66,"extendedDescription":67,"status":68,"abstraction":69,"structure":70},"CWE-428","Unquoted Search Path or Element","The product uses a search path that contains an unquoted element, in which the element contains whitespace or other separators. This can cause the product to access resources in a parent path.","If a malicious individual has access to the file system, it is possible to elevate privileges by inserting such a file as \"C:\\Program.exe\" to be run by a privileged program making use of WinExec.","Draft","Base","Simple",1,false,[],{"title":75,"metaDescription":76,"keywords":77,"canonicalUrl":78,"structuredData":79},"What is CVE-2022-31591? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2022-31591, a high severity cyber security vulnerability from 2022. SAP BusinessObjects BW Publisher Service - versions 420, 43...","CVE-2022-31591, CVE-2022-31591 vulnerability, CVE-2022-31591 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2022, CVSS score, exploit, patch, remediation, sap security, businessobjects_bw_publisher_service vulnerability","\u002Fwhat-is\u002Fcve-2022-31591",{"@context":80,"@type":81,"headline":75,"description":76,"datePublished":10,"dateModified":11,"author":82,"publisher":86,"about":90,"mainEntityOfPage":94,"articleSection":97,"keywords":98},"https:\u002F\u002Fschema.org","TechArticle",{"@type":83,"name":84,"url":85},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":83,"name":84,"url":85,"logo":87},{"@type":88,"url":89},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":91,"name":6,"description":92,"additionalType":93},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":95,"@id":96},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2022-31591","Cybersecurity","CVE-2022-31591, CVE-2022-31591 vulnerability, CVE-2022-31591 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[100],{"Operator":26,"Negate":26,"Nodes":101},[102],{"Operator":103,"Negate":26,"CPEMatch":104},"OR",[105,107],{"Vulnerable":4,"Criteria":47,"MatchCriteriaID":106,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"EA68C531-6573-4491-9AD8-F51F5CEA5FB0",{"Vulnerable":4,"Criteria":50,"MatchCriteriaID":108,"VersionStartExcluding":26,"VersionStartIncluding":26,"VersionEndExcluding":26,"VersionEndIncluding":26},"DE748229-CAE8-4E25-A2B6-FD6D1EE32B8F",[],[],{"lastModified":11,"cacheTime":112,"version":32},1792365203037,{"score":114,"band":115,"action":116,"scoredAt":117},46,"Medium","Plan remediation","2026-10-16T06:55:06.557742+00:00"]