We have a Crystal Reports Java runtime bundle version 11.8.6.1371. Veracode reports CWE 117 in CrystalReportingCommon.jar, CrystalCharting.jar, and CRDBXMLServer.jar.
Which SAP Crystal Reports Java runtime/service pack contains the fix for CWE 117? Is upgrading the complete Crystal bundle required, or are individual jar replacements supported?
Bluesky
You must be a registered user to add a comment. If you've already registered, sign in. Otherwise, register and sign in.