Vulnerabilities

TI-2004-01854 CVE-2004-1981 · GHSA-hcq6-q47h-5jff

The web interface for Crystal Reports allows remote attackers to cause a denial of…

LOW 26

The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01574 Published 2005-05-10 No fix listed

TI-2001-01416 CVE-2001-1464 · GHSA-fw3h-xrw3-5vm5

Crystal Reports, when displaying data for a password protected database using HTML pages…

MEDIUM 40

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.04022 Published 2005-04-21 No fix listed

TI-2004-00175 CVE-2004-0204 · GHSA-8gfg-jjvj-524x

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports…

HIGH 71

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Micro…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.72368 Published 2004-06-11 No fix listed

Vulnerabilities

Filters

The web interface for Crystal Reports allows remote attackers to cause a denial of…

Crystal Reports, when displaying data for a password protected database using HTML pages…

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports…