[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fwOSBwSeHvJHMM_ufyGCwG41amQQbf-cTAbjqleydq3A":3,"g5a-risk:CVE-2006-4099":139},{"success":4,"data":5,"meta":137},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":34,"epssPercentile":28,"epssTimeSeries":35,"severity":37,"affectedProducts":38,"affectedProductsCount":47,"references":48,"referencesCount":93,"weaknesses":94,"weaknessesCount":98,"isActivelyExploited":32,"cisaInfo":28,"otxData":28,"relatedBlogPosts":99,"seoMetadata":100,"configurations":125,"relatedVendorCves":135,"notableEvents":136},"CVE-2006-4099","What is CVE-2006-4099?","Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via WCSID cookie values.","Business Objects Crystal Enterprise 9 and 10 generates predictable session identifiers, which allows remote attackers to hijack sessions of other users via W...","2006-11-29T17:28:00","2026-06-16T22:28:25.713",7.5,"AV:N\u002FAC:L\u002FAu:N\u002FC:P\u002FI:P\u002FA:P",{"CVSSMetricV31":15,"CVSSMetricV30":16,"CVSSMetricV2":17,"CVSSMetricV40":33},[],[],[18],{"Source":19,"Type":20,"CVSSData":21,"BaseSeverity":29,"ExploitabilityScore":30,"ImpactScore":31,"ACInsufInfo":32,"ObtainAllPrivilege":32,"ObtainUserPrivilege":32,"ObtainOtherPrivilege":4,"UserInteractionRequired":32},"nvd@nist.gov","Primary",{"Version":22,"VectorString":13,"AccessVector":23,"AccessComplexity":24,"Authentication":25,"ConfidentialityImpact":26,"IntegrityImpact":26,"AvailabilityImpact":26,"BaseScore":12,"BaseSeverity":27,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","NETWORK","LOW","NONE","PARTIAL","",null,"HIGH",10,6.4,false,[],0.01732,[36,36,36,36,36,36,34],0.01727,"High",[39,44],{"vendor":40,"product":41,"version":42,"criteria":43,"vulnerable":4},"businessobjects","crystal_enterprise","9","cpe:2.3:a:businessobjects:crystal_enterprise:9:*:*:*:*:*:*:*",{"vendor":40,"product":41,"version":45,"criteria":46,"vulnerable":4},"10","cpe:2.3:a:businessobjects:crystal_enterprise:10:*:*:*:*:*:*:*",2,[49,55,59,63,67,71,75,79,81,83,85,87,89,91],{"url":50,"source":51,"tags":52},"http:\u002F\u002Fsecunia.com\u002Fadvisories\u002F23137","Secunia",[53,54],"Patch","Vendor Advisory",{"url":56,"source":57,"tags":58},"http:\u002F\u002Fsupport.businessobjects.com\u002FcommunityCS\u002FFilesAndUpdates\u002Fce10win_en.pdf","Businessobjects",[],{"url":60,"source":61,"tags":62},"http:\u002F\u002Fwww.mwrinfosecurity.com\u002Fadvisories\u002FMWR_crystal-reports-weak-sessions-advisory_2006-11-28.pdf","Mwrinfosecurity",[54],{"url":64,"source":65,"tags":66},"http:\u002F\u002Fwww.securityfocus.com\u002Fbid\u002F21350","Securityfocus",[],{"url":68,"source":69,"tags":70},"http:\u002F\u002Fwww.uniras.gov.uk\u002Fniscc\u002Fdocs\u002Fre-20061128-00818.pdf","Gov",[53,54],{"url":72,"source":73,"tags":74},"http:\u002F\u002Fwww.vupen.com\u002Fenglish\u002Fadvisories\u002F2006\u002F4748","Vupen",[],{"url":76,"source":77,"tags":78},"https:\u002F\u002Fexchange.xforce.ibmcloud.com\u002Fvulnerabilities\u002F30568","Ibmcloud",[],{"url":50,"source":51,"tags":80},[53,54],{"url":56,"source":57,"tags":82},[],{"url":60,"source":61,"tags":84},[54],{"url":64,"source":65,"tags":86},[],{"url":68,"source":69,"tags":88},[53,54],{"url":72,"source":73,"tags":90},[],{"url":76,"source":77,"tags":92},[],14,[95],{"id":96,"name":96,"description":97},"Unknown","NVD-CWE-Other",1,[],{"title":101,"metaDescription":102,"keywords":103,"canonicalUrl":104,"structuredData":105},"What is CVE-2006-4099? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2006-4099, a high severity cyber security vulnerability from 2006. Business Objects Crystal Enterprise 9 and 10 generates predi...","CVE-2006-4099, CVE-2006-4099 vulnerability, CVE-2006-4099 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2006, CVSS score, exploit, patch, remediation, businessobjects security, crystal_enterprise vulnerability","\u002Fwhat-is\u002Fcve-2006-4099",{"@context":106,"@type":107,"headline":101,"description":102,"datePublished":10,"dateModified":11,"author":108,"publisher":112,"about":116,"mainEntityOfPage":120,"articleSection":123,"keywords":124},"https:\u002F\u002Fschema.org","TechArticle",{"@type":109,"name":110,"url":111},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":109,"name":110,"url":111,"logo":113},{"@type":114,"url":115},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":117,"name":6,"description":118,"additionalType":119},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":121,"@id":122},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2006-4099","Cybersecurity","CVE-2006-4099, CVE-2006-4099 vulnerability, CVE-2006-4099 security, high severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[126],{"Operator":28,"Negate":28,"Nodes":127},[128],{"Operator":129,"Negate":32,"CPEMatch":130},"OR",[131,133],{"Vulnerable":4,"Criteria":43,"MatchCriteriaID":132,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"53235D62-18AA-4482-B9AE-9E1AE87BDB3A",{"Vulnerable":4,"Criteria":46,"MatchCriteriaID":134,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"38F02473-3701-413D-B2F2-B400958F22F0",[],[],{"lastModified":11,"cacheTime":138,"version":22},1793221995146,{"score":140,"band":141,"action":142,"scoredAt":143},46,"Medium","Plan remediation","2026-10-28T06:33:58.513792+00:00"]