CVE-2021-40500

CVE-2021-40500 affects SAP BusinessObjects BI Platform (Crystal Reports) versions 420 and 430. The issue stems from missing XML validations at network-exposed endpoints, allowing an unauthenticated attacker to read sensitive data and potentially retrieve arbitrary files from the server. The conne...