46 matches found
EUVD-2018-14313
Malware in sbrugna...
EUVD-2011-4723
Malware in sbrugna...
CVE-2021-33696
SAP BusinessObjects Business Intelligence Platform Crystal Report, versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site...
CVE-2021-33696
CVE-2021-33696 affects SAP BusinessObjects Business Intelligence Platform (Crystal Report) with vulnerable versions 420 and 430. The root cause is insufficient encoding of user-controlled inputs, enabling an XSS vulnerability that can cause non-permanent defacement or modification of displayed co...
CVE-2021-33696: Improper Neutralization of Input During Web Page Generation
SAP BusinessObjects Business Intelligence Platform Crystal Report, versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site...
PT-2021-20273
Name of the Vulnerable Software and Affected Versions: SAP BusinessObjects Business Intelligence Platform Crystal Report versions 420, 430 Description: The issue arises from insufficient encoding of user-controlled inputs, allowing an authorized attacker to exploit a XSS vulnerability. This can...
Server side request forgery (ssrf)
SAP BusinessObjects BI Platform Crystal Report, versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file...
CVE-2020-26831
SAP BusinessObjects BI Platform Crystal Report, versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file...
CVE-2020-26831
SAP BusinessObjects BI Platform (Crystal Report) versions 4.1–4.3 contain an XML validation flaw in crystal report generation, allowing an attacker with basic privileges to inject arbitrary XML entities and cause internal file disclosure, internal directory disclosure, SSRF, and DoS. The root cau...
CVE-2020-26831: Undefined Security Weakness
SAP BusinessObjects BI Platform Crystal Report, versions - 4.1, 4.2, 4.3, does not sufficiently validate uploaded XML entities during crystal report generation due to missing XML validation, An attacker with basic privileges can inject some arbitrary XML entities leading to internal file...
PT-2020-16515
Name of the Vulnerable Software and Affected Versions SAP BusinessObjects BI Platform Crystal Report versions 4.1, 4.2, 4.3 Description The issue arises from insufficient validation of uploaded XML entities during crystal report generation due to missing XML validation. An attacker with basic...
The vulnerability of the Crystal Report component in the SAP Business One resource management system allows a hacker to gain unauthorized access to protected information.
The vulnerability of the Crystal Report component in the SAP Business One resource management system is related to access control errors. Exploiting this vulnerability could allow a malicious actor to gain unauthorized access to protected information from a remote location...
CVE-2018-2458
Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted...
CVE-2018-2458
Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted...
Authentication flaw
Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted...
CVE-2018-2458
Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted...
CVE-2018-2458
CVE-2018-2458 affects SAP Business One, Crystal Reports integration (versions 9.2 and 9.3). The issue is an information disclosure due to a flaw in the connection type that allows an attacker to access data that should be restricted. NVD lists CVSSv3 base score 7.5 (HIGH) and CVSSv2 base score 5....
PT-2018-2616
Name of the Vulnerable Software and Affected Versions SAP Business One versions 9.2 and 9.3 Description The issue is related to errors in access restriction in the Crystal Report component of SAP Business One, which can allow an attacker to access restricted information under certain conditions...
CVE-2018-2458: Undefined Security Weakness
Under certain conditions, Crystal Report using SAP Business One, versions 9.2 and 9.3, connection type allows an attacker to access information which would otherwise be restricted...
