Sap Crystal Reports Server — known CVE vulnerabilities

Every CVE whose affected-product data names Sap Crystal Reports Server, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (5)

• CVE-2009-3345 — CVSS 10.0 (critical): Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in…
• CVE-2009-3346 — CVSS 10.0 (critical): Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as…
• CVE-2018-2406 — CVSS 5.3 (medium): Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30…
• CVE-2009-3344 — CVSS 5.0 (medium): Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop)…
• CVE-2011-4805 — CVSS 4.3 (medium): Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary…