CVE-2001-1464

N/A Unknown

Published: January 10, 2001 Modified: April 16, 2026

Description

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

http://www.kb.cert.org/vuls/id/403307

Source: cve@mitre.org

Exploit Third Party Advisory US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/7928

Source: cve@mitre.org

http://www.kb.cert.org/vuls/id/403307

Source: af854a3a-2127-422b-91ae-364da2661108

Exploit Third Party Advisory US Government Resource

https://exchange.xforce.ibmcloud.com/vulnerabilities/7928

Source: af854a3a-2127-422b-91ae-364da2661108

4 reference(s) from NVD

Quick Stats

CVSS v3 Score

N/A / 10.0

EPSS (Exploit Probability)

0.7%

72th percentile

Exploitation Status

Not in CISA KEV

Affected Vendors

businessobjects