CVE-2018-2427

2018-07-1018:00:00

sap

www.cve.org

8.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.9%

JSON

SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.

CNA Affected

[
  {
    "product": "SAP BusinessObjects Business Intelligence Suite",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "= 4.10"
      },
      {
        "status": "affected",
        "version": "= 4.20"
      }
    ]
  },
  {
    "product": "SAP Crystal Reports",
    "vendor": "SAP",
    "versions": [
      {
        "status": "affected",
        "version": "= version for Visual Studio .NET, Version 2010"
      }
    ]
  }
]