Skip to content
Noroxi

sybase records

37 published records for vendor sybase.

Researcher profile

Entered KEV
0 · 0%
Weaponized
2 · 5.4%
Pre-auth RCE
7
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

  1. 16
  2. 17
  3. 18

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

37 records
  • CVE-2008-0912
    45Plan

    Multiple heap-based buffer overflows in mlsrv10.exe in Sybase MobiLink 10.0.1.3629 and earlier, as used by SQL Anywhere Developer Edition 10

    CriticalCVSS 10.0Proof of conceptEPSS 16%

    sybase · mobilinkFeb 22, 2008

  • CVE-2005-0441
    43Plan

    Multiple stack-based buffer overflows in Sybase Adaptive Server Enterprise (ASE) 12.x before 12.5.3 ESD#1 allow remote authenticated users t

    CriticalCVSS 10.0No exploitEPSS 9%

    sybase · adaptive server enterpriseDec 22, 2004

  • CVE-2002-2250
    42Plan

    Multiple buffer overflows in Sybase Adaptive Server 12.0 and 12.5 allow remote attackers to execute arbitrary code via (1) a long parameter

    CriticalCVSS 10.0No exploitEPSS 8%

    sybase · adaptive serverDec 31, 2002

  • CVE-2013-6245
    41Plan

    Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3.

    CriticalCVSS 10.0No exploitEPSS 5%

    sybase · adaptive server enterpriseOct 23, 2013

  • CVE-2011-0496
    41Plan

    Unspecified vulnerability in Sybase EAServer 5.x and 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), a

    CriticalCVSS 10.0No exploitEPSS 5%

    sybase · appeon for powerbuilderJan 20, 2011

  • CVE-2011-2475
    41Plan

    Format string vulnerability in ECTrace.dll in the iMailGateway service in the Internet Mail Gateway in OneBridge Server and DMZ Proxy in Syb

    CriticalCVSS 10.0No exploitEPSS 4%

    sybase · onebridge mobile data suiteJun 9, 2011

  • CVE-2006-3667
    41Plan

    Unspecified vulnerability in Sybase/Financial Fusion Consumer Banking Suite versions before 20060706 has unknown impact and remote attack ve

    CriticalCVSS 10.0No exploitEPSS 2%

    sybase · financial fusion consumer banking solutionJul 18, 2006

  • CVE-2005-2297
    40Plan

    Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 through 5.2 allows remote authenticated users to execute arbitrary cod

    MediumCVSS 4.6WeaponizedEPSS 74%

    sybase · easerverJul 19, 2005

  • CVE-2011-2474
    39Monitor

    Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote attackers to read arbitrary fi

    MediumCVSS 5.0WeaponizedEPSS 64%

    sybase · easerverJun 9, 2011

  • CVE-2016-7402
    39Monitor

    SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system admini

    CriticalCVSS 9.8No exploitEPSS 1%

    sybase · adaptive server enterpriseNov 3, 2016

  • CVE-2013-6866
    37Monitor

    SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows

    CriticalCVSS 9.0No exploitEPSS 3%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2013-6865
    37Monitor

    SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100

    CriticalCVSS 9.0No exploitEPSS 3%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2013-6863
    37Monitor

    SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100

    CriticalCVSS 9.0No exploitEPSS 2%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2013-6859
    34Monitor

    SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3.

    HighCVSS 8.5No exploitEPSS 2%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2011-0497
    32Monitor

    Directory traversal vulnerability in Sybase EAServer 6.x before 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), a

    HighCVSS 7.8No exploitEPSS 2%

    sybase · appeon for powerbuilderJan 20, 2011

  • CVE-2017-5371
    31Monitor

    Odata Server in SAP Adaptive Server Enterprise (ASE) 16 allows remote attackers to cause a denial of service (process crash) via a series of

    HighCVSS 7.5No exploitEPSS 4%

    sybase · adaptive server enterpriseJan 23, 2017

  • CVE-2014-6284
    31Monitor

    SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and respons

    HighCVSS 7.5No exploitEPSS 2%

    sybase · adaptive server enterpriseJun 8, 2015

  • CVE-2013-6862
    31Monitor

    Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15

    HighCVSS 7.8No exploitEPSS 1%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2013-6868
    31Monitor

    SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100

    HighCVSS 7.8No exploitEPSS 1%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2013-7245
    30Monitor

    The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database du

    HighCVSS 7.5No exploitEPSS 1%

    sybase · adaptive server enterpriseApr 24, 2018

  • CVE-2015-1310
    30Monitor

    SQL injection vulnerability in SAP Adaptive Server Enterprise (Sybase ASE) allows remote attackers to execute arbitrary SQL commands via uns

    HighCVSS 7.5No exploitEPSS 1%

    sybase · adaptive server enterpriseJan 22, 2015

  • CVE-2013-6867
    28Monitor

    Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 before 15.7 SP50 or 15.7 SP100 allows remote attackers to caus

    HighCVSS 7.1No exploitEPSS 2%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2013-6860
    27Monitor

    Unspecified vulnerability in SAP Sybase Adaptive Server Enterprise (ASE) before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15

    MediumCVSS 6.8No exploitEPSS 1%

    sybase · adaptive server enterpriseNov 23, 2013

  • CVE-2014-6283
    26Monitor

    SAP Adaptive Server Enterprise (ASE) 15.7 before SP122 or SP63, 15.5 before ESD#5.4, and 15.0.3 before ESD#4.4 does not properly restrict ac

    MediumCVSS 6.5No exploitEPSS 1%

    sybase · adaptive server enterpriseOct 17, 2014

  • CVE-2011-5078
    26Monitor

    The web administration interface in the server in Sybase M-Business Anywhere 6.7 before ESD# 3 and 7.0 before ESD# 7 does not require admin

    MediumCVSS 6.5No exploitEPSS 1%

    sybase · m-business anywhereFeb 8, 2012