CVE-2019-0285

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.

Affected

SAP SE · SAP Crystal Reports for Visual Studio

CVSS v3.0 NVD

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

6.61% chance of exploitation in the next 30 days, 94th percentile

Published

2019-04-10

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/47061

Security advisories

• https://launchpad.support.sap.com/#/notes/2687663
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114

References

• CVE Record
• NVD entry