Vulnerabilities (CVE)

Filtered by vendor Sap Subscribe
Filtered by product Crystal Reports
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2020-6208 1 Sap 1 Crystal Reports 2021-07-21 4.4 MEDIUM 8.2 HIGH
SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of the application, leading to Remote Code Execution. Although the mode of attack is only Local, multiple applications can be impacted as a result of the vulnerability.
CVE-2018-2427 1 Sap 2 Businessobjects Business Intelligence, Crystal Reports 2018-09-06 6.5 MEDIUM 8.8 HIGH
SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.