VULNERABILITY INTELLIGENCE

CVE-2019-0285

CVSS score9.8 CRITICAL
EPSS probability6.61%
CISA KEVNot currently listed
Published2019-04-10
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The .NET SDK WebForm Viewer in SAP Crystal Reports for Visual Studio (fixed in version 2010) discloses sensitive database information including credentials which can be misused by the attacker.

Weakness classification

  • CWE-312: Cleartext Storage of Sensitive Information

Primary references