GCVE - cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:crystal_reports_server:2008:*:*:*:*:*:*:*

part: a version: 2008 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Crystal Reports Server (`695a0e49-2929-5c6e-a54f-3c97ec31e8c1`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2011-4805`	vulnerable	2026-06-08 04:59:33.062459	Details available Cross-site scripting (XSS) vulnerability in pubDBLogon.jsp in SAP Crystal Report Server 2008 allows remote attackers to inject arbitrary web script or HTML via the service parameter. Published: 2011-12-14T00:00:00.000Z Updated: 2024-08-07T00:16:35.044Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/520560/100/0/threaded http://www.sdn.sap.com/irj/sdn/index?rid=/webcontent/uuid/c05604f6-4eb3-2d10-eea7-ceb666083a6a https://service.sap.com/sap/support/notes/1562292 http://dsecrg.com/pages/vul/show.php?id=333	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3346`	vulnerable	2026-06-08 04:51:33.338063	Details available Unspecified vulnerability in SAP Crystal Reports Server 2008 allows remote attackers to execute arbitrary code via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Published: 2009-09-24T16:00:00.000Z Updated: 2024-09-17T02:47:01.647Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36267 http://intevydis.com/vd-list.shtml http://secunia.com/advisories/36583	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3345`	vulnerable	2026-06-08 04:51:33.337761	Details available Heap-based buffer overflow in SAP Crystal Reports Server 2008 has unknown impact and attack vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Published: 2009-09-24T16:00:00.000Z Updated: 2024-09-17T03:02:22.712Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36267 http://intevydis.com/vd-list.shtml http://secunia.com/advisories/36583	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-3344`	vulnerable	2026-06-08 04:51:33.337393	Details available Unspecified vulnerability in SAP Crystal Reports Server 2008 on Windows XP allows attackers to cause a denial of service (infinite loop) via unknown vectors, as demonstrated by a certain module in VulnDisco Pack Professional 8.3 through 8.11. NOTE: as of 20090917, this disclosure has no actionable information. However, because the VulnDisco Pack author is a reliable researcher, the issue is being assigned a CVE identifier for tracking purposes. Published: 2009-09-24T16:00:00.000Z Updated: 2024-09-16T23:11:16.280Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/36267 http://intevydis.com/vd-list.shtml http://secunia.com/advisories/36583	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.