CVE-2004-2742 Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT...
MediumCVSS 4.3
EPSS 1.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT) file.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| businessobjects crystal enterprise | = 8.5 | No fix listed |
| businessobjects crystal enterprise | = 9 | No fix listed |
| businessobjects crystal enterprise | = 10 | No fix listed |
References
- 13644 patch third-party-advisory vendor-advisory
- 1012703 vdb-entry
- support.businessobjects.com patch
- 12596 patch vdb-entry
- 12107 patch vdb-entry
- crystal-enterprise-report-xss(18684) vdb-entry