Lucene search

[email protected]CVE-2013-6864

HistoryOct 03, 2022 - 4:14 p.m.

CVE-2013-6864

2022-10-0316:14:52

CWE-22

[email protected]

web.nvd.nist.gov

cve-2013-6864

sap sybase

adaptive server enterprise

ase

directory traversal

vulnerability

confidentiality

integrity

availability

nvd

6.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:C/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.4%

JSON

Directory traversal vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to affect confidentiality, integrity, and availability via unspecified vectors.

Affected configurations

NVD

Node

sybaseadaptive_server_enterpriseMatch15.0.3

sybaseadaptive_server_enterpriseMatch15.5

sybaseadaptive_server_enterpriseMatch15.7

CPENameOperatorVersion
sybase:adaptive_server_enterprisesybase adaptive server enterpriseeq15.0.3
sybase:adaptive_server_enterprisesybase adaptive server enterpriseeq15.5
sybase:adaptive_server_enterprisesybase adaptive server enterpriseeq15.7

CPE	Name	Operator	Version
sybase:adaptive_server_enterprise	sybase adaptive server enterprise	eq	15.0.3
sybase:adaptive_server_enterprise	sybase adaptive server enterprise	eq	15.5
sybase:adaptive_server_enterprise	sybase adaptive server enterprise	eq	15.7

References

scn.sap.com/docs/DOC-8218

secunia.com/advisories/55537

www.sybase.com/detail?id=1099371

service.sap.com/sap/support/notes/1893556

6.1 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

SINGLE

Confidentiality Impact

COMPLETE

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:H/Au:S/C:C/I:P/A:P

6.4 Medium

AI Score

Confidence

Low

0.003 Low

EPSS

Percentile

71.4%

JSON

Related for CVE-2013-6864

prion1 nvd1 cvelist1