Businessobjects Crystal Enterprise — known CVE vulnerabilities

Every CVE whose affected-product data names Businessobjects Crystal Enterprise, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (4)

• CVE-2004-0204 — CVSS 7.5 (high): Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used…
• CVE-2006-4099 — CVSS 7.5 (high): Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of…
• CVE-2004-1981 — CVSS 5.0 (medium): The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting…
• CVE-2004-2742 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject…