Businessobjects

Records13All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Businessobjects records in CISA KEV

No Businessobjects vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Crystal Enterprise 4 records HIGH Webintelligence 4 records LOW Crystal Reports 3 records HIGH Crystal Reports Xi 3 records HIGH Infoview 3 records LOW Crystal Enterprise Java Sdk 1 record HIGH Crystal Enterprise Ras 1 record HIGH Crystal Enterprise Xi 1 record LOW

Records

4 records in Crystal Enterprise · all components

TI-2004-00175 CVE-2004-0204 · GHSA-8gfg-jjvj-524x

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports…

HIGH 71

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Micro…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.72368 Published 2004-06-11 No fix listed

TI-2006-03973 CVE-2006-4099 · GHSA-8w9m-64r7-55xx

Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers…

LOW 36

Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01732 Published 2006-11-29 No fix listed

TI-2004-01854 CVE-2004-1981 · GHSA-hcq6-q47h-5jff

The web interface for Crystal Reports allows remote attackers to cause a denial of…

LOW 26

The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01574 Published 2005-05-10 No fix listed

TI-2004-02612 CVE-2004-2742 · GHSA-g543-9hw2-5g6m

Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5…

LOW 23

Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT) file.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01223 Published 2007-10-09 No fix listed CWE-79

Open these records in search →

Critical	1
High	5
Medium	6
Low	1
No CVSS	0