Businessobjects Crystal Reports — known CVE vulnerabilities

Every CVE whose affected-product data names Businessobjects Crystal Reports, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (3)

• CVE-2001-1464 — CVSS 7.5 (high): Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in…
• CVE-2004-0204 — CVSS 7.5 (high): Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used…
• CVE-2004-1981 — CVSS 5.0 (medium): The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting…