Schweregrad:: Mittel
  Hinweisdatum: 21 Juli 2015

  Beschreibung

SAP Business Objects Crystal Reports is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials. This issue may be related to the issue described in BID 12107 (Business Objects Crystal Enterprise Report File Cross-Site Scripting Vulnerability). This BID will be updated or retired when more information becomes available.

  Trend Micro Lösungen

Apply associated Trend Micro DPI Rules.

  Lösungen

  Trend Micro Deep Security DPI Rule Number: 1000552
  Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention

  Betroffene Software und Version:

  • Business Objects Crystal Reports 10.0
  • Business Objects Crystal Reports 7.0
  • Business Objects Crystal Reports 8.0
  • Business Objects Crystal Reports 9.0
  • Business Objects Crystal Reports Server XI 0
  • Business Objects Crystal Reports XI Professional 0
  • Business Objects Crystal Reports XI Release 2 0
  • Business Objects Crystal Reports for Visual Studio .NET 2002 0
  • Business Objects Crystal Reports for Visual Studio .NET 2003 0
  • Business Objects Crystal Reports for Visual Studio .NET 2005 10.2