Medium · 5.3 CVE-2018-2406 EUVD-2018-14261GHSA-fpfg-hpwq-xgwm

Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30,…

Published Apr 10, 2018 · Updated Aug 5, 2024 · Assigned by sap

Vendor: SAP Product: SAP Crystal Reports Server, OEM Edition

Description

Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.

Affected products

Vendor	Product	Affected	Fixed
SAP SE	SAP Crystal Reports Server, OEM Edition	4.0, 4.10, 4.20, 4.30	—

References

https://launchpad.support.sap.com/#/notes/2560132
https://blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/
103719 vdb-entry