PatchTheCVEbusinessobjects vulnerabilities
Recent CVEs affecting businessobjects products. 13 tracked.
businessobjects has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2008-04-18. Highest priority: CVE-2008-0379 (score 61/100).
- CVE-2008-1894 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoV
- CVE-2008-0379 HIGH 9.3 DOWNGRADE Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports X
- CVE-2006-6133 HIGH 7.6 MITIGATE DOWNGRADE Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP
- CVE-2006-4099 HIGH 7.5 DOWNGRADE Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote at
- CVE-2005-4813 MEDIUM 5.0 MITIGATE MITIGATE Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Busines
- CVE-2005-4274 MEDIUM 5.0 DOWNGRADE Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial o
- CVE-2004-2742 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remo
- CVE-2004-1981 MEDIUM 5.0 DOWNGRADE DOWNGRADE The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) b
- CVE-2004-0534 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence
- CVE-2004-0533 LOW 2.1 DOWNGRADE DOWNGRADE Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows
- CVE-2004-0204 HIGH 7.5 DOWNGRADE MITIGATE Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crysta
- CVE-2003-1249 HIGH 7.5 DOWNGRADE WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions.
- CVE-2001-1464 HIGH 7.5 MITIGATE Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username
FAQ
How do I fix businessobjects vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is businessobjects being exploited right now?
None of the tracked businessobjects CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which businessobjects CVE should I patch first?
CVE-2008-0379 currently ranks highest (61/100): Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports X.