3 matches found
CVE-2020-6219
SAP Business Objects Business Intelligence Platform CrystalReports WebForm Viewer, versions 4.1, 4.2, and Crystal Reports for VS version 2010, allows an attacker with basic authorization to perform deserialization attack in the application, leading to service interruptions and denial of service a...
CVE-2020-6219
CVE-2020-6219 affects SAP Business Objects BI Platform components including CrystalReports WebForm Viewer (SAP Crystal Reports for VS 2010) and Crystal Reports Platform versions 4.1/4.2. The root cause is a deserialization of untrusted data vulnerability that an attacker with basic authorization ...
SAP BusinessObjects 12 - URI redirection / Cross-Site Scripting
source: https://www.securityfocus.com/bid/37972/info SAP BusinessObjects is prone to multiple URI-redirection issues and multiple cross-site scripting issues because it fails to sufficiently sanitize user-supplied input. Attackers can exploit these issues to execute arbitrary script or HTML code,...