CVE-2018-2406

CVE-2018-2406 affects SAP Crystal Reports Server OEM Edition (CRSE) startup path: unquoted Windows search path leads to local directory/path traversal. Versions 4.0, 4.10, 4.20, 4.30 are affected; local privilege elevation is indicated in connected CNVD entry. The vulnerability’s CVSS notes local...

CVE-2009-3344

CVE-2009-3344 concerns SAP Crystal Reports Server 2008 on Windows XP with a denial-of-service condition (infinite loop) reported via VulnDisco Pack 8.3–8.11. The public disclosure includes no actionable information and does not specify the attack vectors, affected components, or a fix. Multiple s...

CVE-2009-3346

The CVE-2009-3346 entry concerns SAP Crystal Reports Server 2008 with an unspecified vulnerability that could allow remote code execution via unknown vectors, as demonstrated by VulnDisco Pack Professional versions 8.3–8.11. The description notes that, as of 2009-09-17, there is no actionable inf...

CVE-2009-3345

CVE-2009-3345 describes a heap-based buffer overflow in SAP Crystal Reports Server 2008. The vulnerability is evidenced by a module in VulnDisco Pack Professional 8.3–8.11. The Initial Description notes unknown impact and attack vectors as of disclosure, and actionability was limited at the time....

CVE-2011-4805

SAP Crystal Reports Server 2008 is affected by a Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp, allowing remote attackers to inject arbitrary web script or HTML via the service parameter. The issue is described for SAP Crystal Reports Server 2008; no further technical details (affect...