BU
Vendor
Businessobjects
22
CVEs
0
On KEV
0
New 30D
Products
CE–
Crystal Enterprise
Businessobjects
4 CVEs0 on KEV0 new
WE–
Webintelligence
Businessobjects
4 CVEs0 on KEV0 new
CR–
Crystal Reports
Businessobjects
3 CVEs0 on KEV0 new
CR–
Crystal Reports XI
Businessobjects
3 CVEs0 on KEV0 new
IN–
Infoview
Businessobjects
3 CVEs0 on KEV0 new
CE–
Crystal Enterprise Java Sdk
Businessobjects
1 CVEs0 on KEV0 new
CE–
Crystal Enterprise Ras
Businessobjects
1 CVEs0 on KEV0 new
CE–
Crystal Enterprise XI
Businessobjects
1 CVEs0 on KEV0 new
CR–
Crystal Reports Server XI
Businessobjects
1 CVEs0 on KEV0 new
RA–
Report Application Server
Businessobjects
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2008-1894 | IN Infoview Businessobjects | – | Apr 18 | Cross-site scripting (XSS) vulnerability in desktoplaunch/InfoView/logon/logon.object in BusinessObjects InfoView XI R2 SP1, SP2, and SP3 Java version before FixPack 3.5 allows… |
| CVE-2008-0379 | CR Crystal Reports XI Businessobjects | – | Jan 22 | Race condition in the Enterprise Tree ActiveX control (EnterpriseControls.dll 11.5.0.313) in Crystal Reports XI Release 2 allows remote attackers to cause a denial of service… |
| CVE-2006-4099 | CE Crystal Enterprise Businessobjects | – | Nov 29 | Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values |
| CVE-2006-6133 | CR Crystal Reports XI Businessobjects | – | Nov 28 | Stack-based buffer overflow in Visual Studio Crystal Reports for Microsoft Visual Studio .NET 2002 and 2002 SP1, .NET 2003 and 2003 SP1, and 2005 and 2005 SP1 (formerly Business… |
| CVE-2005-4813 | CE Crystal Enterprise XI Businessobjects | – | Dec 31 | Unspecified vulnerability in Report Application Server (Crystalras.exe) before 11.0.0.1370, as used in Business Objects Crystal Reports XI, Crystal Reports Server XI, and… |
| CVE-2005-4274 | WE Webintelligence Businessobjects | – | Dec 15 | Unspecified vulnerability in Business Objects WebIntelligence 6.5x allows remote attackers to cause a denial of service (user account lock out) via unknown attack vectors related… |
| CVE-2004-2742 | CE Crystal Enterprise Businessobjects | – | Dec 31 | Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the… |
| CVE-2004-0533 | IN Infoview Businessobjects | – | Dec 31 | Business Objects WebIntelligence 2.7.0 through 2.7.4 only enforces access controls on the client, which allows remote authenticated users to delete arbitrary files on the server… |
| CVE-2004-0534 | IN Infoview Businessobjects | – | Sep 17 | Cross-site scripting (XSS) vulnerability in Business Objects InfoView 5.1.4 through 5.1.8 for WebIntelligence 2.7.0 through 2.7.4 allows remote attackers to inject arbitrary web… |
| CVE-2004-0204 | CE Crystal Enterprise Businessobjects | – | Aug 6 | Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook… |
| CVE-2004-1981 | CE Crystal Enterprise Businessobjects | – | May 2 | The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated… |
| CVE-2003-1249 | WE Webintelligence Businessobjects | – | Dec 31 | WebIntelligence 2.7.1 uses guessable user session cookies, which allows remote attackers to hijack sessions |
| CVE-2001-1464 | CR Crystal Reports Businessobjects | – | Jan 10 | Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows… |