CVE-2013-6025 in Sybase Adaptive Server Enterprise
Summary
The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
Reservation
10/04/2013
Disclosure
10/19/2013
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 10848 | SAP Sybase Adaptive Server Enterprise XML External Entity XMLParse code injection | 94 | Proof-of-Concept | Official fix | CVE-2013-6025 |