PatchTheCVEcrystal reports vulnerabilities and fixes
Recent CVEs affecting crystal reports, with upgrade or downgrade steps. 10 tracked.
Also searched as: crystalreports.
crystal reports has 10 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-03-10. Highest priority: CVE-2019-0285 (score 68/100).
- CVE-2020-6208 HIGH 8.2 DOWNGRADE SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker
- CVE-2019-0285 CRITICAL 9.8 DOWNGRADE The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensiti
- CVE-2018-2427 HIGH 8.8 DOWNGRADE MITIGATE SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for
- CVE-2014-5506 MEDIUM 6.8 MITIGATE Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted
- CVE-2014-5505 MEDIUM 6.8 MITIGATE Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a cra
- CVE-2010-3032 HIGH 10.0 DOWNGRADE Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Cryst
- CVE-2010-2590 HIGH 9.3 DOWNGRADE Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 1
- CVE-2004-1981 MEDIUM 5.0 DOWNGRADE DOWNGRADE The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) b
- CVE-2004-0204 HIGH 7.5 DOWNGRADE MITIGATE Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crysta
- CVE-2001-1464 HIGH 7.5 MITIGATE Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username
FAQ
How do I fix crystal reports vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is crystal reports being exploited right now?
None of the tracked crystal reports CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which crystal reports CVE should I patch first?
CVE-2019-0285 currently ranks highest (68/100): The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensiti.