adaptive server enterprise vulnerabilities and fixes

Recent CVEs affecting adaptive server enterprise, with upgrade or downgrade steps. 15 tracked.

Also searched as: adaptiveserverenterprise.

adaptive server enterprise has 15 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2022-06-14. Highest priority: CVE-2018-2469 (score 51/100).

CVE-2022-31595 HIGH 8.8 DOWNGRADE SAP Financial Consolidation - version 1010,�does not perform necessary authorization checks for an authenticat
CVE-2022-31594 MEDIUM 6.7 DOWNGRADE A highly privileged user can exploit SUID-root program to escalate his privileges to root on a local Unix syst
CVE-2022-22528 HIGH 7.8 DOWNGRADE SAP Adaptive Server Enterprise (ASE) - version 16.0, installation makes an entry in the system PATH environmen
CVE-2020-6317 LOW 3.5 DOWNGRADE In certain situations, an attacker with regular user credentials and local access to an ASE cockpit installati
CVE-2020-6295 HIGH 7.8 DOWNGRADE Under certain conditions the SAP Adaptive Server Enterprise, version 16.0, allows an attacker to access encryp
CVE-2020-6259 MEDIUM 6.5 DOWNGRADE Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access inf
CVE-2020-6253 HIGH 7.2 DOWNGRADE Under certain conditions, SAP Adaptive Server Enterprise (Web Services), versions 15.7, 16.0, allows an authen
CVE-2020-6250 MEDIUM 6.8 DOWNGRADE SAP Adaptive Server Enterprise, version 16.0, allows an authenticated attacker to exploit certain misconfigure
CVE-2020-6243 HIGH 8.8 DOWNGRADE Under certain conditions, SAP Adaptive Server Enterprise (XP Server on Windows Platform), versions 15.7, 16.0,
CVE-2020-6241 HIGH 8.8 DOWNGRADE SAP Adaptive Server Enterprise, version 16.0, allows an authenticated user to execute crafted database queries
CVE-2019-0402 MEDIUM 4.4 UPGRADE SAP Adaptive Server Enterprise, before versions 15.7 and 16.0, under certain conditions exposes some sensitive
CVE-2018-2469 HIGH 7.5 DOWNGRADE Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to a
CVE-2018-2468 HIGH 7.5 DOWNGRADE Under certain conditions the backup server in SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, al
CVE-2018-2457 MEDIUM 6.5 DOWNGRADE Under certain conditions SAP Adaptive Server Enterprise, version 16.0, allows some privileged users to access
CVE-2013-7245 HIGH 7.5 DOWNGRADE The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restri

FAQ

How do I fix adaptive server enterprise vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is adaptive server enterprise being exploited right now?

None of the tracked adaptive server enterprise CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which adaptive server enterprise CVE should I patch first?

CVE-2018-2469 currently ranks highest (51/100): Under certain conditions SAP Adaptive Server Enterprise (ASE), versions 15.7 and 16.0, allows an attacker to a.

RSS feed for adaptive server enterprise · ← Back to latest CVEs