Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sap crystal reports - vulnerabilities and exploits
(subscribe to this query)
409
VMScore
CVE-2018-2406
Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.
Sap Crystal Reports Server 4.10
Sap Crystal Reports Server 4.20
Sap Crystal Reports Server 4.30
Sap Crystal Reports Server 4.0
392
VMScore
CVE-2020-6208
SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the malicious user to control the behaviour of the application, leading ...
Sap Crystal Reports 4.1
Sap Crystal Reports 4.2
605
VMScore
CVE-2014-5505
Stack-based buffer overflow in SAP Crystal Reports allows remote malicious users to execute arbitrary code via a crafted data source string in an RPT file.
Sap Crystal Reports -
605
VMScore
CVE-2014-5506
Double free vulnerability in SAP Crystal Reports allows remote malicious users to execute arbitrary code via crafted connection string record in an RPT file.
Sap Crystal Reports -
890
VMScore
CVE-2010-3032
Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote malicious users to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which trigge...
Sap Crystal Reports 2008
940
VMScore
CVE-2010-2590
Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote malicious users to execute arbitrary code via a long ServerResourceVersion property value.
Sap Crystal Reports 2008
2 EDB exploits
505
VMScore
CVE-2019-0285
The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.
Sap Crystal Reports 2010
1 EDB exploit
383
VMScore
CVE-2011-4805
Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote malicious users to inject arbitrary web script or HTML via the service parameter.
Sap Crystal Reports Server 2008
890
VMScore
CVE-2009-3345
Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 up to and including 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, beca...
Sap Crystal Reports Server 2008
890
VMScore
CVE-2009-3346
Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote malicious users to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 up to and including 8.11. NOTE: as of 20090917, this disclosure has no ...
Sap Crystal Reports Server 2008
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-29895
blind SQL injection
CVE-2024-5064
CVE-2023-52677
CVE-2023-52682
CVE-2024-30051
CVE-2024-35849
remote attackers
remote
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
NEXT »