SAP Sybase Adaptive Server Enterprise Information Disclosure (SAP Note 1887341)

Information in protected files on machines running SAP Sybase ASE may be disclosed to an attacker. This information may be used by the attacker to further target specialized attacks on the system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid70973;...

SAP Sybase Adaptive Server Enterprise SQL Injection (SAP Note 1893440)

SAP Sybase Adaptive Server Enterprise ASE contains a flaw that may allow an attacker to carry out a SQL injection attack. The issue is due to the program not properly sanitizing user-supplied input before using it in SQL queries. This may allow an attacker to inject or manipulate SQL queries in t...