Sql injection

SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa system administrator via dbcc importsproc SQL injection...

CVE-2016-7402

SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa system administrator via dbcc importsproc SQL injection...

CVE-2016-7402

CVE-2016-7402 affects SAP ASE 16.0 SP02 PL03 and earlier. The vulnerability is a SQL injection in dbcc import_sproc that allows attackers who control SourceDB and TargetDB to elevate privileges to sa (system administrator). Root cause is the dbcc import_sproc path; impact is privilege escalation ...

PT-2016-7313

Name of the Vulnerable Software and Affected Versions SAP ASE versions 16.0 SP02 PL03 and prior Description The issue allows attackers who own SourceDB and TargetDB databases to elevate privileges to sa system administrator via dbcc import sproc SQL injection. Recommendations For SAP ASE versions...

CVE-2016-7402: Undefined Security Weakness

SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa system administrator via dbcc importsproc SQL injection...

SAP ASE ODATA Server - Denial of Service

Application: SAP ASE Versions Affected: SAP ASE 16 Vendor URL: SAP Bugs: Denial of Service Reported: 01.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 12.10.2016 Reference: SAP Security Note 2330422 Author: Vahagn Vardanyan ERPScan VULNERABILITY INFORMATION Class: Denial of Service...

SAP Adaptive Server Enterprise - DoS vulnerability

Application: SAP Adaptive Server Enterprise Versions Affected: SAP Adaptive Server Enterprise 16 Vendor URL: SAP Bug: Denial of Service Reported: 01.02.2016 Vendor response: 02.02.2016 Date of Public Advisory: 12.07.2016 Reference: SAP Security Note 2330839 Author: Vahgan Vardanyan ERPScan...

CVE-2014-6284

SAP Adaptive Server Enterprise ASE before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995...

CVE-2014-6284

CVE-2014-6284 affects SAP Sybase ASE prior to 15.7 SP132 and 16.0 prior to 16.0 SP01. The issue lets remote attackers bypass the challenge–response mechanism and obtain access to the probe account via a crafted response (SAP Security Note 2113995). The cited notes describe a security bypass in th...

CVE-2015-4160

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

Sql injection

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

CVE-2015-4160

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

CVE-2015-4160

CVE-2015-4160 describes a SQL injection vulnerability in the SAP ASE Database Platform. A remote attacker could exploit unspecified vectors to execute arbitrary SQL commands, potentially viewing, adding, modifying, or deleting data. The entry references SAP Security Notes: 2152278. The NVD score ...

PT-2015-6440

Name of the Vulnerable Software and Affected Versions SAP ASE Database Platform affected versions not specified Description A SQL injection issue allows remote attackers to execute arbitrary SQL commands. Recommendations At the moment, there is no information about a newer version that contains a...

CVE-2015-4160: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP ASE Database Platform allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes: 2152278...

CVE-2015-1310

SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

Sql injection

SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2015-1310

SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2015-1310

CVE-2015-1310 describes a SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE). The affected product is SAP ASE, and the vulnerability allows remote attackers to execute arbitrary SQL commands via unspecified vectors (as noted alongside SAP Note 2113333). The public descript...

CVE-2015-1310: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SAP Adaptive Server Enterprise Sybase ASE allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Note 2113333. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...