4 matches found
CVE-2016-7402
SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa system administrator via dbcc importsproc SQL injection...
9.8CVSS5.8AI score0.01066EPSS
SaveExploits0References2
CVE-2016-7402
SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa system administrator via dbcc importsproc SQL injection...
9.8CVSS9.9AI score0.01066EPSS
SaveExploits0References2
CVE-2016-7402
CVE-2016-7402 affects SAP ASE 16.0 SP02 PL03 and earlier. The vulnerability is a SQL injection in dbcc import_sproc that allows attackers who control SourceDB and TargetDB to elevate privileges to sa (system administrator). Root cause is the dbcc import_sproc path; impact is privilege escalation ...
9.8CVSS9.8AI score0.01066EPSS
SaveExploits0References2Affected Software1
20