[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQJji9nmJbLw0SiZQLF_yA_RsbEfPJxobx3TONrzGybg":3,"g5a-ex:sap\u002Fcrystal_reports_server@*":86,"g5a-family:sap\u002Fcrystal_reports_server":88},{"success":4,"data":5},true,{"product":6,"versions":27,"topVulnerabilitiesByEpss":33,"kevVulnerabilities":63,"seoMetadata":64,"meta":83},{"vendorName":7,"productName":8,"versionCount":9,"totalCves":9,"kevCount":10,"lastCveUpdate":11,"versions":12,"description":26},"sap","crystal_reports_server",5,0,"2018-04-10",[13,17,20,22,24],{"version":14,"cve_count":15,"kev_count":10,"has_kev":16},"2008",4,false,{"version":18,"cve_count":19,"kev_count":10,"has_kev":16},"4.0",1,{"version":21,"cve_count":19,"kev_count":10,"has_kev":16},"4.10",{"version":23,"cve_count":19,"kev_count":10,"has_kev":16},"4.20",{"version":25,"cve_count":19,"kev_count":10,"has_kev":16},"4.30","Crystal Reports Server by Sap is a technology product with 5 tracked versions and 5 known security vulnerabilities. Get comprehensive security analysis, vulnerability tracking, and threat intelligence for this product.",[28,29,30,31,32],{"version":14,"cve_count":15,"kev_count":10,"has_kev":16},{"version":18,"cve_count":19,"kev_count":10,"has_kev":16},{"version":21,"cve_count":19,"kev_count":10,"has_kev":16},{"version":23,"cve_count":19,"kev_count":10,"has_kev":16},{"version":25,"cve_count":19,"kev_count":10,"has_kev":16},[34,42,46,51,57],{"cveId":35,"description":36,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":16,"epssScore":41},"CVE-2009-3346","Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.","2009-09-24",10,"v2","Critical",0.03878,{"cveId":43,"description":44,"publishedDate":37,"cvssScore":38,"cvssVersion":39,"severity":40,"isKev":16,"epssScore":45},"CVE-2009-3345","Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.",0.01624,{"cveId":47,"description":48,"publishedDate":37,"cvssScore":9,"cvssVersion":39,"severity":49,"isKev":16,"epssScore":50},"CVE-2009-3344","Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11.  NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes.","Medium",0.01605,{"cveId":52,"description":53,"publishedDate":54,"cvssScore":55,"cvssVersion":39,"severity":49,"isKev":16,"epssScore":56},"CVE-2011-4805","Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter.","2011-12-14",4.3,0.01094,{"cveId":58,"description":59,"publishedDate":11,"cvssScore":60,"cvssVersion":61,"severity":49,"isKev":16,"epssScore":62},"CVE-2018-2406","Unquoted windows search path (directory\u002Fpath traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.",5.3,"v3.0",0.00349,[],{"title":65,"metaDescription":66,"keywords":67,"structuredData":68},"Crystal Reports Server by Sap - Security Vulnerabilities & Analysis | Precursor Intelligence","Comprehensive security analysis for Crystal Reports Server by Sap covering 5 versions with 5 tracked vulnerabilities. Real-time threat intelligence, CVE tracking, and security recommendations.","Crystal Reports Server vulnerabilities, Crystal Reports Server security, Crystal Reports Server CVE, Sap Crystal Reports Server, Crystal Reports Server threat intelligence, Sap security, product security analysis, cybersecurity threats, vulnerability management, CVE tracking",{"@context":69,"@type":70,"name":71,"description":66,"url":72,"manufacturer":73,"applicationCategory":77,"softwareVersion":78,"mainEntity":79},"https:\u002F\u002Fschema.org","SoftwareApplication","Crystal Reports Server","https:\u002F\u002Fprecursorintelligence.com\u002Fvulnerabilities\u002Ftechnologies\u002Fvendors\u002Fsap\u002Fcrystal_reports_server",{"@type":74,"name":75,"url":76},"Organization","Sap","https:\u002F\u002Fprecursorintelligence.com\u002Fvendors\u002Fsap","Security Software","5 versions tracked",{"@type":80,"name":81,"description":82,"vulnerabilityCount":9,"dateModified":11},"SecurityVulnerability","Crystal Reports Server Security Vulnerabilities","Security vulnerabilities affecting Crystal Reports Server by Sap",{"totalVersions":9,"totalVulnerabilities":9,"kevVulnerabilities":10,"lastUpdated":11,"generatedAt":84,"apiVersion":85},"2026-10-19T01:10:04.511Z","3.0",{"rows":87,"total":10,"capped":16,"failed":10},[],[]]