What’s Vulnerable › Vulnerabilities

CVE-2004-1981

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2004-05-02 · updated 2026-06-16

Description

The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.

Affected products

• Businessobjects Crystal Enterprise: 9, 10
• Businessobjects Crystal Reports: 9, 10

References

• http://marc.info/?l=bugtraq&m=108360413811017&w=2
• http://marc.info/?l=bugtraq&m=108671836127360&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16046
• http://marc.info/?l=bugtraq&m=108360413811017&w=2
• http://marc.info/?l=bugtraq&m=108671836127360&w=2
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16046

Get alerted when CVE-2004-1981 or the next vulnerability affects your stack