CVE-2001-1464: Businessobjects Crystal Reports

High severity, CVSS 7.5. EPSS: 4% chance of exploitation in the next 30 days.

Crystal Reports, when displaying data for a password protected database using HTML pages, embeds the username and password in cleartext in the HTML page and the URL, which allows remote attackers to obtain passwords.

Affected products

• Businessobjects Crystal Reports: any version

Published 2001-01-10. Last modified 2026-06-16.