292 matches found
CVE-2018-2468
CVE-2018-2468 affects SAP Adaptive Server Enterprise (ASE) backup server in versions 15.7 and 16.0. The issue is an information-disclosure vulnerability where an attacker can access restricted information under certain conditions. The provided connected documents confirm the affected component (B...
CVE-2018-2469
SAP Adaptive Server Enterprise (ASE) versions 15.7 and 16.0 are affected by an information-disclosure vulnerability that allows an attacker to access data that would normally be restricted. The available sources (NVD/CNVD/related records) consistently describe this as an information-disclosure is...
CVE-2018-2468: Undefined Security Weakness
Under certain conditions the backup server in SAP Adaptive Server Enterprise ASE, versions 15.7 and 16.0, allows an attacker to access information which would otherwise be restricted...
PT-2018-15584
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise ASE versions 15.7 through 16.0 Description The backup server in SAP Adaptive Server Enterprise ASE has an issue that allows an attacker to access restricted information under certain conditions. Recommendations F...
Security Bulletin: Vulnerabilities in IBM Tivoli Composite Application Manager Agent for Sybase ASE with potential for privilege escalation (CVE-2013-5467)
Summary Privilege escalation vulnerability in the IBM Tivoli Composite Application Manager Agent for Sybase ASE could be exploited by a local user to gain elevated privilege of another user. Vulnerability Details CVEID: CVE-2013-5467 Description: Privilege escalation vulnerability could be...
CVE-2013-7245
The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859...
CVE-2013-7245
The CVE-2013-7245 issue affects SAP Sybase ASE 15.7 Backup Server component prior to SP51. The root cause is a failure to validate credentials, allowing remote attackers to bypass access restrictions and perform database dumps. Impact is exposure of data via unauthorized dumps; no exploitation de...
CVE-2013-7245
The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859...
PT-2018-4112
Name of the Vulnerable Software and Affected Versions SAP Sybase ASE version 15.7 before SP51 Description The issue allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials. Recommendations For SAP Sybase ASE version 15.7 befor...
CVE-2013-7245: Improper Authorization
The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859...
Qualys Policy Compliance Notification: Policy Library Update
Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from vendo...
SUSE SLED12 / SLES12 Security Update : binutils (SUSE-SU-2017:3170-1)
GNU binutil was updated to the 2.29.1 release, bringing various new features, fixing a lot of bugs and security issues. Following security issues are being addressed by this release : - 18750 bsc1030296 CVE-2014-9939 - 20891 bsc1030585 CVE-2017-7225 - 20892 bsc1030588 CVE-2017-7224 - 20898...
CVE-2017-5371
Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...
CVE-2017-5371
CVE-2017-5371 affects SAP ASE OData Server (SAP ASE 16) and was disclosed as a Denial of Service vulnerability. The issue arises when processing crafted requests sent over the network to the OData service, which can crash the SAP ASE OData Server process. Public advisories (ERPScan/SAP Security N...
CVE-2017-5371: Improper Input Validation
Odata Server in SAP Adaptive Server Enterprise ASE 16 allows remote attackers to cause a denial of service process crash via a series of crafted requests, aka SAP Security Note 2330422...
PT-2017-16458
Name of the Vulnerable Software and Affected Versions SAP Adaptive Server Enterprise ASE version 16 Description The issue allows remote attackers to cause a denial of service, resulting in a process crash, by sending a series of crafted requests to the Odata Server. Recommendations For SAP Adapti...
SAP ASE ODATA SERVER denial of service vulnerability(CVE-2017-5371)
No description provided by source...
SAP ASE ODATA Server 16 Denial Of Service Vulnerability
SAP ASE ODATA Server version 16 suffers from a denial of service vulnerability. Application: SAP ASE Versions Affected: SAP ASE ODATA Server v16 Vendor URL: http://SAP.com Bugs: Denial of Service Sent: 01.02.2016 Reported: 02.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 12.10.2016...
