vulnwire
7.5high

CVE-2004-0204in critical feed1 exploit

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used…

Published 22 y ago · modified 4 mo ago · JSON

CVSS
7.5
v2.0 · NVD
CISA KEV
No
not known exploited
EPSS
72.4%
percentile 99%
Public exploits
1
Exploit-DB

Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.

Exploit prediction (EPSS)

72.37% probability of exploitation in the next 30 days, higher than 99% of all scored CVEs.

Exploits and detections

  • EDB-24077 Business Objects Crystal Reports 9/10 Web Form Viewer - Directory Traversal · remote · 2004-05-03

CVSS scores

Assigned byVersionScoreVector
NVD2.07.5AV:N/AC:L/Au:N/C:P/I:P/A:P

References

  • marc.info /?l=bugtraq&m=108360413811017&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • support.businessobjects.com /fix/hot/critical/bulletins/security_bulletin_june04.asp · x_refsource_CONFIRM, x_transferred
  • secunia.com /advisories/11800 · third-party-advisory, x_refsource_SECUNIA, x_transferred
  • marc.info /?l=bugtraq&m=108671836127360&w=2 · mailing-list, x_refsource_BUGTRAQ, x_transferred
  • exchange.xforce.ibmcloud.com /vulnerabilities/16044 · vdb-entry, x_refsource_XF, x_transferred
  • osvdb.org /6748 · vdb-entry, x_refsource_OSVDB, x_transferred
  • securityfocus.com /bid/10260 · vdb-entry, x_refsource_BID, x_transferred
  • oval.cisecurity.org /repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A1157 · vdb-entry, signature, x_refsource_OVAL, x_transferred
  • docs.microsoft.com /en-us/security-updates/securitybulletins/2004/ms04-017 · vendor-advisory, x_refsource_MS, x_transferred

Sources

vulnwire keeps one entry per vulnerability: the CVE id wins, then GHSA; records that alias each other are merged. Machine-readable: JSON.