Crystal Reports Server (Sap) - vulnerabilities (CVEs)

5 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2018-04-10. Vendor: Sap.

CVEs of Crystal Reports Server

• CVE-2018-2406 - CVSS 5.3 (medium), 2018-04-10: Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.
• CVE-2011-4805 - CVSS 4.3 (medium), 2011-12-14: Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML…
• CVE-2009-3346 - CVSS 10 (critical), 2009-09-24: Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a…
• CVE-2009-3345 - CVSS 10 (critical), 2009-09-24: Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack…
• CVE-2009-3344 - CVSS 5 (medium), 2009-09-24: Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors,…