[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f29qAKchGevgWyXjBGfrUNsjN2INC4ndqA5vXb854Mrw":3,"g5a-ex:sap\u002Fcrystal_reports@*":100,"g5a-family:sap\u002Fcrystal_reports":102},{"success":4,"data":5},true,{"product":6,"versions":26,"topVulnerabilitiesByEpss":31,"kevVulnerabilities":77,"seoMetadata":78,"meta":97},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":10,"kevCount":11,"lastCveUpdate":12,"versions":13,"description":25},"sap","crystal_reports",4,7,0,"2020-03-10",[14,18,21,23],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},"2008",2,false,{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},"2010",1,{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},"4.1",{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},"4.2","Crystal Reports by Sap is a technology product with 4 tracked versions and 7 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[27,28,29,30],{"version":15,"cve_count":16,"kev_count":11,"has_kev":17},{"version":19,"cve_count":20,"kev_count":11,"has_kev":17},{"version":22,"cve_count":20,"kev_count":11,"has_kev":17},{"version":24,"cve_count":20,"kev_count":11,"has_kev":17},[32,40,47,53,60,64,71],{"cveId":33,"description":34,"publishedDate":35,"cvssScore":36,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":39},"CVE-2010-2590","Heap-based buffer overflow in the CrystalReports12.CrystalPrintControl.1 ActiveX control in PrintControl.dll 12.3.2.753 in SAP Crystal Reports 2008 SP3 Fix Pack 3.2 allows remote attackers to execute arbitrary code via a long ServerResourceVersion property value.","2010-12-22",9.3,"v2","Critical",0.46776,{"cveId":41,"description":42,"publishedDate":43,"cvssScore":44,"cvssVersion":45,"severity":38,"isKev":17,"epssScore":46},"CVE-2019-0285","The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.","2019-04-10",9.8,"v3.0",0.06609,{"cveId":48,"description":49,"publishedDate":50,"cvssScore":51,"cvssVersion":37,"severity":38,"isKev":17,"epssScore":52},"CVE-2010-3032","Integer overflow in the OBGIOPServerWorker::extractHeader function in the ebus-3-3-2-6.dll module in SAP Crystal Reports 2008 allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a GIOP packet with a crafted size, which triggers a heap-based buffer overflow.","2010-08-17",10,0.0643,{"cveId":54,"description":55,"publishedDate":56,"cvssScore":57,"cvssVersion":37,"severity":58,"isKev":17,"epssScore":59},"CVE-2014-5505","Stack-based buffer overflow in SAP Crystal Reports allows remote attackers to execute arbitrary code via a crafted data source string in an RPT file.","2014-09-04",6.8,"Medium",0.03809,{"cveId":61,"description":62,"publishedDate":56,"cvssScore":57,"cvssVersion":37,"severity":58,"isKev":17,"epssScore":63},"CVE-2014-5506","Double free vulnerability in SAP Crystal Reports allows remote attackers to execute arbitrary code via crafted connection string record in an RPT file.",0.0306,{"cveId":65,"description":66,"publishedDate":67,"cvssScore":68,"cvssVersion":45,"severity":69,"isKev":17,"epssScore":70},"CVE-2018-2427","SAP BusinessObjects Business Intelligence Suite, versions 4.10 and 4.20, and SAP Crystal Reports (version for Visual Studio .NET, Version 2010) allows an attacker to inject code that can be executed by the application. An attacker could thereby control the behaviour of the application.","2018-07-10",8.8,"High",0.01724,{"cveId":72,"description":73,"publishedDate":12,"cvssScore":74,"cvssVersion":75,"severity":69,"isKev":17,"epssScore":76},"CVE-2020-6208","SAP Business Objects Business Intelligence Platform (Crystal Reports), versions- 4.1, 4.2, allows an attacker with basic authorization to inject code that can be executed by the application and thus allowing the attacker to control the behaviour of the application, leading to Remote Code Execution. Although the mode of attack is only Local, multiple applications can be impacted as a result of the vulnerability.",8.2,"v3.1",0.01142,[],{"title":79,"metaDescription":80,"keywords":81,"structuredData":82},"Crystal Reports by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Crystal Reports by Sap covering 4 versions with 7 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Crystal Reports vulnerabilities, Crystal Reports security, Crystal Reports CVE, Sap Crystal Reports, Crystal Reports threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":83,"@type":84,"name":85,"description":80,"url":86,"manufacturer":87,"applicationCategory":91,"softwareVersion":92,"mainEntity":93},"https:\u002F\u002Fschema.org","SoftwareApplication","Crystal Reports","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fcrystal_reports",{"@type":88,"name":89,"url":90},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","4 versions tracked",{"@type":94,"name":95,"description":96,"vulnerabilityCount":10,"dateModified":12},"SecurityVulnerability","Crystal Reports Security Vulnerabilities","Security vulnerabilities affecting Crystal Reports by Sap",{"totalVersions":9,"totalVulnerabilities":10,"kevVulnerabilities":11,"lastUpdated":12,"generatedAt":98,"apiVersion":99},"2026-10-18T23:53:14.640Z","3.0",{"rows":101,"total":11,"capped":17,"failed":11},[],[103,106],{"product":104,"cves":105},"crystal_reports_server",5,{"product":107,"cves":20},"crystal_reports_for_visual_studio"]