CVE-2016-7402 in ASEinfo

Summary

SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc import_sproc SQL injection.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

Reservation

09/09/2016

Disclosure

11/03/2016

Entries

1

CPE

ready

CVSS

9.8

EPSS

0.00248

CTI

0.00

Sources

MITREhttps://www.cve.org/CVERecord?id=CVE-2016-7402
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2016-7402
CVE Detailshttps://www.cvedetails.com/cve/CVE-2016-7402/

◂ PreviousOverviewNext ▸

Might our Artificial Intelligence support you?

Check our Alexa App!