Skip links
RedRays - Your SAP Security Solution
Arpine Maghakyan

Arpine Maghakyan

Security Researcher of RedRays.

XML External Entity vulnerability in Crystal Reports for Enterprise, SAP security note 2569748

Description

A user can experience errors/hangs when interacting with a Crystal Reports for Enterprise report that embeds an Xcelsius SWF object.

Available fix and Supported packages

  • ENTERPRISE | 410 | 410
  • ENTERPRISE | 420 | 420
  • SBOP BI PLATFORM SERVERS 4.1 | SP011 | 000000
  • SBOP BI PLATFORM SERVERS 4.2 | SP006 | 000000

Affected component

    BI-RA-CRE
    Crystal Reports for Enterprise

CVSS

Score: 0

Exploit

Detailed vulnerability information added to RedRays Security Platform. Contact [email protected] for details.

URL

https://launchpad.support.sap.com/#/notes/2569748

TAGS

#Crystal-Reports-for-Enterprise
#XML-External-Entity
#Xcelsius
#SWF

More to explorer

SAP Cloud Connector Certificate Validation Issue

February 13, 2024

Date of Release: February 13, 2024 Advisory ID: CVE-2024-25642 Affected Software: SAP Cloud Connector Versions Affected: 2.15.0 to 2.16.1 Vulnerability Summary:A critical vulnerability,