Crystal Reports (Sap) - vulnerabilities (CVEs)

7 CVEs, 0 in the last 30 days, 7 known versions, newest CVE from 2020-03-10. Vendor: Sap.

CVEs of Crystal Reports

• CVE-2020-6208 - CVSS 8.2 (high), 2020-03-10: SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can…
• CVE-2019-0285 - CVSS 9.8 (critical), 2019-04-10: The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials…
• CVE-2018-2427 - CVSS 8.8 (high), 2018-07-10: SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an…
• CVE-2014-5506 - CVSS 6.8 (medium), 2014-09-04: Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file.
• CVE-2014-5505 - CVSS 6.8 (medium), 2014-09-04: Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file.
• CVE-2010-2590 - CVSS 9.3 (critical), 2010-12-22: Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix…
• CVE-2010-3032 - CVSS 10 (critical), 2010-08-17: Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause…