CVE:CVE-2018-2427
CNNVD:CNNVD-201807-925
SAP BusinessObjects Business Intelligence Suite和SAP Crystal Reports都是德国思爱普（SAP）公司的产品。SAP BusinessObjects Business Intelligence Suite是一套商业智能软件和企业绩效解决方案套件。该产品具有报告生成、分析和数据可视化等功能。SAP Crystal Reports是一套商业智能报表工具。
SAP BusinessObjects Business Intelligence Suite 4.10版本，4.20版本和Crystal Reports（Visual Studio .NET 2010版本）中存在代码注入漏洞。远程攻击者可利用该漏洞在应用程序的上下文中执行任意代码，控制应用程序的运行。
solution:Upgrade sap businessobjects_business_intelligence to a higher version than 4.10,4.20,and avoid the version 4.10,4.20; Upgrade sap crystal_reports to a higher version than -