CVE-2004-2742: XSS
First published: Fri Dec 31 2004(Updated: )
Cross-site scripting (XSS) vulnerability in the report viewer in Crystal Enterprise 8.5, 9, and 10 allows remote attackers to inject arbitrary web script or HTML via script in the URL to a report (RPT) file.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP BusinessObjects Crystal Enterprise | =8.5 | |
| SAP BusinessObjects Crystal Enterprise | =10 | |
| SAP BusinessObjects Crystal Enterprise | =10 | |
| SAP BusinessObjects Crystal Enterprise | =8.5 | |
| SAP BusinessObjects Crystal Enterprise | =10 | |
| SAP BusinessObjects Crystal Enterprise | =10 | |
| SAP BusinessObjects Crystal Enterprise | =10 | |
| SAP BusinessObjects Crystal Enterprise | =9 | |
| SAP BusinessObjects Crystal Enterprise | =8.5 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-2742?
CVE-2004-2742 has a medium severity rating as it allows for cross-site scripting attacks which can compromise user data.
How do I fix CVE-2004-2742?
To fix CVE-2004-2742, upgrade your Crystal Enterprise to a patched version that addresses the XSS vulnerability.
Who is affected by CVE-2004-2742?
CVE-2004-2742 affects users of SAP BusinessObjects Crystal Enterprise versions 8.5, 9, and 10 across multiple operating systems.
What types of attacks can occur due to CVE-2004-2742?
CVE-2004-2742 can be exploited to perform cross-site scripting attacks, potentially allowing the attacker to steal session cookies or redirect users.
Is CVE-2004-2742 a remote vulnerability?
Yes, CVE-2004-2742 is a remote vulnerability that can be exploited by attackers over the internet.
- agent/references
- agent/type
- agent/remedy
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/severity
- agent/author
- agent/event
- agent/description
- agent/source
- agent/weakness
- agent/softwarecombine
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/businessobjects
- canonical/sap businessobjects crystal enterprise
- version/sap businessobjects crystal enterprise/8.5
- version/sap businessobjects crystal enterprise/10
- version/sap businessobjects crystal enterprise/9