CVE-2004-1981
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk...
CVE-2004-1981 is a medium vulnerability (CVSS 5.0) in Businessobjects Crystal Reports, published May 2, 2004. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.57%, the 75th percentile. No source names a fixed version.
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
Exploit likelihood
What each source reports
NVD Score used
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
- Record
CVE-2004-1981- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Updated
- 2026-11-02
CVE List No score
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
- Record
CVE-2004-1981- Updated
- 2026-11-02
EUVDEUVD-2004-1973 No score
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
- Record
EUVD-2004-1973- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-hcq6-q47h-5jff No score
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk...
The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion) by repeatedly requesting reports without retrieving the associated image files, which are not cleared from the image file folder.
- Record
GHSA-hcq6-q47h-5jff- Updated
- 2026-11-02
Affected products
History
| When | Changed | Sources |
|---|---|---|
| 2026-11-03 | aliases | EUVD |
| 2026-11-02 | created | CVE List, GitHub Advisories, NVD |