{"metadata": {"vulnerability": "CVE-2022-35291", "count": 22, "kinds": {"milestone": 6, "sighting": 1, "kev": 0, "other": 15}}, "data": [{"timestamp": "2022-07-07T00:00:00Z", "date_only": false, "value": "2022-07-07T00:00:00.000Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2022-35291", "field": "cveMetadata.dateReserved"}, {"timestamp": "2022-07-27T13:30:02Z", "date_only": false, "value": "2022-07-27T13:30:02.000Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2022-35291", "field": "cveMetadata.datePublished"}, {"timestamp": "2022-07-27T13:30:02Z", "date_only": false, "value": "2022-07-27T13:30:02.000Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / sap", "record": "CVE-2022-35291", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2022-07-27T14:15:00Z", "date_only": false, "value": "2022-07-27T14:15:00Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-MJ46-HJJ8-XR5C", "record": "GHSA-MJ46-HJJ8-XR5C", "field": "database_specific.nvd_published_at"}, {"timestamp": "2022-07-27T14:15:00Z", "date_only": false, "value": "2022-07-27T14:15Z", "kind": "other", "label": "Published Date", "source": "gsd \u00b7 GSD-2022-35291", "record": "GSD-2022-35291", "field": "namespaces.nvd.nist.gov.publishedDate"}, {"timestamp": "2022-07-27T14:15:08.717Z", "date_only": false, "value": "2022-07-27T14:15:08.717", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35291", "record": "FKIE_CVE-2022-35291", "field": "published"}, {"timestamp": "2022-07-27T18:46:47Z", "date_only": false, "value": "2022-07-27T18:46:47.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/47077", "record": "CVE-2022-35291", "field": "creation_timestamp", "uuid": "e5b13c3c-7680-44a0-9017-363b86df88c7", "content": "\u203c CVE-2022-35291 \u203c\n\nDue to misconfigured application endpoints, SAP SuccessFactors attachment APIs allow attackers with user privileges to perform activities with admin privileges over the network. These APIs were consumed in the SF Mobile application for Time Off, Time Sheet, EC Workflow, and Benefits. On successful exploitation, the attacker can read/write attachments. Thus, compromising the confidentiality and integrity of the application\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "url": "https://t.me/cibsecurity/47077"}, {"timestamp": "2022-07-28T00:00:49Z", "date_only": false, "value": "2022-07-28T00:00:49Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-MJ46-HJJ8-XR5C", "record": "GHSA-MJ46-HJJ8-XR5C", "field": "published"}, {"timestamp": "2022-07-29T00:00:00Z", "date_only": true, "value": "2022-07-29", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2022-56955", "record": "CNVD-2022-56955", "field": "submitTime"}, {"timestamp": "2022-08-02T20:09:00Z", "date_only": false, "value": "2022-08-02T20:09Z", "kind": "other", "label": "Last Modified Date", "source": "gsd \u00b7 GSD-2022-35291", "record": "GSD-2022-35291", "field": "namespaces.nvd.nist.gov.lastModifiedDate"}, {"timestamp": "2022-08-03T00:00:54Z", "date_only": false, "value": "2022-08-03T00:00:54Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-MJ46-HJJ8-XR5C", "record": "GHSA-MJ46-HJJ8-XR5C", "field": "modified"}, {"timestamp": "2022-08-11T00:00:00Z", "date_only": true, "value": "2022-08-11", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2022-56955", "record": "CNVD-2022-56955", "field": "openTime"}, {"timestamp": "2022-09-14T00:00:00Z", "date_only": false, "value": "2022-09-14T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-819", "record": "CERTFR-2022-AVI-819", "field": "last_revision_date"}, {"timestamp": "2022-09-14T00:00:00Z", "date_only": false, "value": "2022-09-14T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-819", "record": "CERTFR-2022-AVI-819", "field": "initial_release_date"}, {"timestamp": "2022-09-14T00:00:00Z", "date_only": false, "value": "2022-09-14T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-819", "record": "CERTFR-2022-AVI-819", "field": "revisions.0.revision_date"}, {"timestamp": "2022-11-10T00:00:00Z", "date_only": false, "value": "2022-11-10T00:00:00", "kind": "other", "label": "Last revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1020", "record": "CERTFR-2022-AVI-1020", "field": "last_revision_date"}, {"timestamp": "2022-11-10T00:00:00Z", "date_only": false, "value": "2022-11-10T00:00:00", "kind": "milestone", "label": "Published", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1020", "record": "CERTFR-2022-AVI-1020", "field": "initial_release_date"}, {"timestamp": "2022-11-10T00:00:00Z", "date_only": false, "value": "2022-11-10T00:00:00.000000", "kind": "other", "label": "Revision date", "source": "certfr_avis \u00b7 CERTFR-2022-AVI-1020", "record": "CERTFR-2022-AVI-1020", "field": "revisions.0.revision_date"}, {"timestamp": "2023-12-13T01:19:33.987Z", "date_only": false, "value": "2023-12-13T01:19:33.987906Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2022-35291", "record": "GSD-2022-35291", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-08-03T09:36:43.436Z", "date_only": false, "value": "2024-08-03T09:36:43.436Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2022-35291", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-08-03T09:36:43.436Z", "date_only": false, "value": "2024-08-03T09:36:43.436Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2022-35291", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2026-06-17T04:51:44.050Z", "date_only": false, "value": "2026-06-17T04:51:44.050", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2022-35291", "record": "FKIE_CVE-2022-35291", "field": "lastModified"}]}