CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 7.5. It affects Microsoft. Its EPSS score suggests a 73.0% probability of exploitation in the next 30 days. It may be remotely exploitable.
CVE
CVE-2004-0204
Severity
HIGH
CVSS
7.5
EPSS
72.99%
Microsoft
Original NVD Description
Directory traversal vulnerability in the web viewers for Business Objects Crystal Reports 9 and 10, and Crystal Enterprise 9 or 10, as used in Visual Studio .NET 2003 and Outlook 2003 with Business Contact Manager, Microsoft Business Solutions CRM 1.2, and other products, allows remote attackers to read and delete arbitrary files via ".." sequences in the dynamicimag argument to crystalimagehandler.aspx.