CVE-2013-7245

The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859...

CVE-2013-7245

The CVE-2013-7245 issue affects SAP Sybase ASE 15.7 Backup Server component prior to SP51. The root cause is a failure to validate credentials, allowing remote attackers to bypass access restrictions and perform database dumps. Impact is exposure of data via unauthorized dumps; no exploitation de...

CVE-2013-7245

The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859...

PT-2018-4112

Name of the Vulnerable Software and Affected Versions SAP Sybase ASE version 15.7 before SP51 Description The issue allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials. Recommendations For SAP Sybase ASE version 15.7 befor...

CVE-2013-7245: Improper Authorization

The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859...

NEW: Vulnerability and Assessment Scanning for Your AWS Cloud Databases

Scuba is a free and easy-to-use tool that uncovers hidden security risks. Scuba is frequently updated with content from Imperva’s Defense Center researchers. With Scuba you can: Scan enterprise databases for vulnerabilities and misconfigurations Identify risks to your databases Get recommendation...

Qualys Policy Compliance Notification: Policy Library Update

Qualys’ library of built-in policies makes it easy to comply with the security standards and regulations that are most commonly used and adhered to. Qualys provides a wide range of policies, including many that have been certified by CIS as well as the ones based on security guidelines from vendo...

Five Tips for Getting Started with Scuba Database Vulnerability Scanner

Scuba is a free tool that scans leading enterprise databases for security vulnerabilities and configuration flaws, including patch levels, that allows you to uncover potential database security risks. It includes more than 2,300 assessment tests for Oracle, Microsoft SQL Server, SAP Sybase, IBM D...

Qualys Cloud Suite 8.10.2 New Features

This new patch release of the Qualys Cloud Suite, version 8.10.2, includes updates to shared platform features, a new role for user management, and expanded Policy Compliance platform support. Feature Highlights Qualys Cloud Platform Limit number of external scanners – You can now limit the numbe...

Sybase TCP/IP Listener Detection

Detects a Sybase TCP/IP listener server by sending a login packet and checking the response. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only if...

SAP Adaptive Server Enterprise Denial of Service Vulnerability

SAP Adaptive Server Enterprise Sybase ASE is a relational database management system from SAP. The system can be used in data-intensive environments and is characterized by high speed and stable performance. A denial of service vulnerability exists in SAP Adaptive Server Enterprise, which could b...

SAP Sybase Adaptive Server Enterprise - XML External Entity Information Disclosure

SAP Sybase Adaptive Server Enterprise - XML External Entity Information Disclosure source: https://www.securityfocus.com/bid/63193/info SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive...

SAP Sybase Adaptive Server Enterprise XML External Entity Information Disclosure Vulnerability

SAP Sybase Adaptive Server Enterprise suffers from an XXE injection vulnerability. source: http://www.securityfocus.com/bid/63193/info SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive...

SAP Sybase Adapter Server Enterprise XXE Injection

SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. SAP Sybase Adaptive Server Enterprise 15.7 ESD 2 is vulnerable; other versions may also be...

SAP Sybase Adaptive Server Enterprise - XML External Entity Information Disclosure

source: https://www.securityfocus.com/bid/63193/info SAP Sybase Adaptive Server Enterprise is prone to an information-disclosure vulnerability. An attacker can exploit this issue to gain access to sensitive information; this may lead to further attacks. SAP Sybase Adaptive Server Enterprise 15.7...

SAP SYBASE SQL Anywhere DoS

DoS on request processing...

[ERPSCAN-15-010] SYBASE SQL Anywhere 12 and 16 - DoS

ERPSCAN Research Advisory ERPSCAN-15-010 SYBASE SQL Anywhere 12 and 16 - DoS Application: SYBASE SQL Anywhere 12 and 16 Versions Affected: SYBASE SQL Anywhere 12 and 16, probably others Vendor URL: http://SAP.com Bugs: DoS Sent: 09.12.2014 Reported: 09.12.2014 Vendor response: 10.12.2014 Date of...

[ERPSCAN-15-009] SAP Afaria 7 XcListener - Missing authorization check

ERPSCAN Research Advisory ERPSCAN-15-009 SAP Afaria 7 XcListener - Missing authorization check Application: SAP Afaria 7 Versions Affected: SAP Afaria 7, probably others Vendor URL: http://SAP.com Bugs: Missing authorization check Sent: 09.12.2014 Reported: 09.12.2014 Vendor response: 10.12.2014...

SAP Sybase Adaptive Server Enterprise SQL Injection Vulnerability

SAP Sybase Adaptive Server Enterprise is a relational database management system. A SQL injection vulnerability in SAP Sybase Adaptive Server Enterprise allows remote attackers to exploit the vulnerability by submitting specially crafted SQL queries to manipulate or obtain database data...

SAP Sybase Unwired Platform Online Data Proxy Information Disclosure Vulnerability

SAP Sybase Unwired Platform is a suite of enterprise-grade mobile application platforms.Online Data Proxy is one of the online data proxy modules. A security vulnerability in SAP Sybase Unwired Platform Online Data Proxy allows a local attacker to exploit the DataVault library to obtain username...