CVE-2019-0285

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.

CVSS v3.0

9.8 CRITICALCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0

5.0 MEDIUMAV:N/AC:L/Au:N/C:P/I:N/A:N

EPSS

6.61% chance of exploitation in the next 30 days, 93th percentile

Published

2019-04-10

Updated

2024-08-04

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/47061

References

• CVE Record
• NVD entry

Related

• CVE-2019-0235
• CVE-2019-0307
• CVE-2019-0232
• CVE-2019-0319
• CVE-2019-0230
• CVE-2019-0539