危険度: 中
  情報公開日: 7 21, 2015

  概要

SAP Business Objects Crystal Reports is prone to a cross-site scripting vulnerability. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of the affected site and to steal cookie-based authentication credentials. This issue may be related to the issue described in BID 12107 (Business Objects Crystal Enterprise Report File Cross-Site Scripting Vulnerability). This BID will be updated or retired when more information becomes available.

  トレンドマイクロの対策

Apply associated Trend Micro DPI Rules.

  対応方法

  Trend Micro Deep Security DPI Rule Number: 1000552
  Trend Micro Deep Security DPI Rule Name: 1000552 - Generic Cross Site Scripting(XSS) Prevention

  影響を受けるソフトウェア

  • Business Objects Crystal Reports 10.0
  • Business Objects Crystal Reports 7.0
  • Business Objects Crystal Reports 8.0
  • Business Objects Crystal Reports 9.0
  • Business Objects Crystal Reports Server XI 0
  • Business Objects Crystal Reports XI Professional 0
  • Business Objects Crystal Reports XI Release 2 0
  • Business Objects Crystal Reports for Visual Studio .NET 2002 0
  • Business Objects Crystal Reports for Visual Studio .NET 2003 0
  • Business Objects Crystal Reports for Visual Studio .NET 2005 10.2