cve,link,title,description,vendor,products,score,severity,epss,cisa,article,ransomware,exploited,poc,trended,trended_no_1,published,trended_score CVE-2021-40500,https://securityvulnerability.io/vulnerability/CVE-2021-40500,,"SAP BusinessObjects Business Intelligence Platform (Crystal Reports) - versions 420, 430, allows an unauthenticated attacker to exploit missing XML validations at endpoints to read sensitive data. These endpoints are normally exposed over the network and successful exploitation can enable the attacker to retrieve arbitrary files from the server.",SAP,SAP Businessobjects Business Intelligence Platform (crystal Reports),7.5,HIGH,0.0017800000496208668,false,false,false,false,,false,false,2021-10-12T14:04:23.000Z,0 CVE-2021-33696,https://securityvulnerability.io/vulnerability/CVE-2021-33696,,"SAP BusinessObjects Business Intelligence Platform (Crystal Report), versions - 420, 430, does not sufficiently encode user controlled inputs and therefore an authorized attacker can exploit a XSS vulnerability, leading to non-permanently deface or modify displayed content from a Web site.",SAP,SAP Businessobjects Business Intelligence Platform (crystal Report),5.4,MEDIUM,0.000539999979082495,false,false,false,false,,false,false,2021-09-15T18:01:42.000Z,0