Browse CVEs

HIGH 9.3 CVE-2008-0379EPSS 9% Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to … Crystal Reports Xi No fix yet Fix from $1,9502008-01-22 HIGH 7.5 CVE-2006-4099 Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other use… Crystal Enterprise Patch available Fix from $1,9502006-11-29 HIGH 7.6 CVE-2006-6133EPSS 51% Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and… Crystal Reports Xi Mitigation only Fix from $1,9502006-11-28 MEDIUM 5.0 CVE-2005-4813 Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal R… Crystal Enterprise Xi Patch available Fix from $1,6002005-12-31 MEDIUM 5.0 CVE-2005-4274 Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via u… Webintelligence No fix yet Fix from $1,6002005-12-15 MEDIUM 5.0 CVE-2004-1981 The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without… Crystal Enterprise Mitigation only Fix from $1,6002004-05-02 HIGH 7.5 CVE-2003-1249 WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions. Webintelligence Patch available Fix from $1,9502003-12-31 HIGH 7.5 CVE-2001-1464 Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML p… Crystal Reports No fix yet Fix from $1,9502001-01-10