SAP Crystal Reports runtime engine for .NET Framework & Veracode issues

[former_member1086255]

This is regarding SAP Crystal Reports, version for Visual Studio (SAP Crystal Reports runtime engine for .NET Framework 13.0.26.3348) . We use this in our application. We have quite number of veracode issues reported for this software.

Please suggest if we have these issues are addressed, so we could use it in our application.

[former_member763929]

Thank you for visiting SAP Community to get answers to your questions. Since this is your first question, I recommend that you familiarize yourself with Community Q&A , as the overview provides tips for preparing questions that draw responses from our members.

Should you wish, you can revise your question by selecting Actions, then Edit.

By adding a picture to your Profileyou encourage readers to respond.

[former_member11696 · Accepted solution]

Hello,

Since we don't patch CR for VS, only full builds, I suggest upgrading to the latest SP 31 and test again:

https://wiki.scn.sap.com/wiki/display/BOBJ/Crystal+Reports%2C+Developer+for+Visual+Studio+Downloads

Click the Follow button to get updates.

Also, often this scanners will detect issues but if that part is not used in your application you can ignore it.

And if it is used you will need to purchase a support incident so you can attach a the sample app showing how it's an issue.

The other thing is often third party scanners report false/positives...

Don