CVE-2019-0285

CRITICAL

SAP Crystal Reports - Information Disclosure

Title source: exploit-db.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2019-0285 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Affected products and versions

1
ProductSourceVersion range

SAP Crystal Reports for Visual Studio

Browse SAP SE / SAP Crystal Reports for Visual Studio
CVE List< 2010affected

Proofs of concept

1

Catalogued exploits

ExploitDBSAP Crystal Reports - Information DisclosureExploitDB exploitby Mohamed M.FouadNot analyzed1 file
ExploitDB
PoC details

References

4