CVE-2001-1464
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds...
CVE-2001-1464 is a high vulnerability (CVSS 7.5) in Businessobjects Crystal Reports, published January 10, 2001. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 4.02%, the 90th percentile. No source names a fixed version.
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
Exploit likelihood
What each source reports
NVD Score used
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
- Record
CVE-2001-1464- CVSS 2.0
- 7.5 High
AV:N/AC:L/Au:N/C:P/I:P/A:P - Updated
- 2026-11-02
CVE List No score
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
- Record
CVE-2001-1464- Updated
- 2026-11-02
EUVDEUVD-2001-1444 No score
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
- Record
EUVD-2001-1444- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-fw3h-xrw3-5vm5 No score
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds...
Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.
- Record
GHSA-fw3h-xrw3-5vm5- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |