Sap Crystal Reports Server vulnerabilities

5 vulnerabilities

Known vulnerabilities in Sap Crystal Reports Server, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

5.3MediumCVE-2018-2406sap se · sap crystal reports server, oem edition +1 moresap se sap crystal reports server, oem editionUnquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.EPSS0.35%4.3MediumCVE-2011-4805sap · crystal_reports_serversap crystal_reports_serverCross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter.EPSS1.09%10CriticalCVE-2009-3346sap · crystal_reports_serversap crystal_reports_serverUnspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.EPSS3.88%10CriticalCVE-2009-3345sap · crystal_reports_serversap crystal_reports_serverHeap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.EPSS1.62%5MediumCVE-2009-3344sap · crystal_reports_serversap crystal_reports_serverUnspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.EPSS1.60%