CVE-2004-1981: The web interface for Crystal Reports allows remote attackers to cause a denial of service (disk exhaustion...

Security readout for executives and security teams

This is a denial-of-service issue in the Crystal Reports web interface. Repeated report requests can leave generated image files behind until disk space is exhausted, potentially disrupting reporting or the hosting server. The provided sources do not identify affected versions, a CVSS score, a patch, or active exploitation. Most likely exposure is legacy Crystal Reports web interface deployments, especially internet-facing or broadly accessible internal reporting portals. The source bundle does not identify affected versions, authentication requirements, or specific default paths. Treat this as a legacy service availability risk. Prioritize if Crystal Reports is exposed to the internet, supports business-critical reporting, or shares disk resources with other applications. If access is tightly restricted and monitored, urgency is lower but cleanup and vendor validation remain important. Mitigation focus: Check vendor or product guidance for affected Crystal Reports versions and available fixes.; Restrict access to the Crystal Reports web interface to trusted users and networks.; Monitor disk usage for report-generated image or temporary folders..

Prepared

Jun 29, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.