Medium severity5.3NVD Advisory· Published Apr 10, 2018· Updated Jun 17, 2026
CVE-2018-2406
CVE-2018-2406
Description
Unquoted windows search path (directory/path traversal) vulnerability in Crystal Reports Server, OEM Edition (CRSE), 4.0, 4.10, 4.20, 4.30, startup path.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
5cpe:2.3:a:sap:crystal_reports_server:4.0:*:*:*:oem:*:*:*+ 3 more
- cpe:2.3:a:sap:crystal_reports_server:4.0:*:*:*:oem:*:*:*
- cpe:2.3:a:sap:crystal_reports_server:4.10:*:*:*:oem:*:*:*
- cpe:2.3:a:sap:crystal_reports_server:4.20:*:*:*:oem:*:*:*
- cpe:2.3:a:sap:crystal_reports_server:4.30:*:*:*:oem:*:*:*
- SAP SE/SAP Crystal Reports Server, OEM Editionv5Range: 4.0
Patches
Vulnerability mechanics
References
3- blogs.sap.com/2018/04/10/sap-security-patch-day-april-2018/nvdVendor Advisory
- www.securityfocus.com/bid/103719nvdBroken Link
- launchpad.support.sap.comnvdPermissions Required
News mentions
0No linked articles in our index yet.