CVE-2013-6025 in Sybase Adaptive Server Enterprise

Sumário

de MITRE

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Reservar: 04/10/2013
• Divulgação: 19/10/2013
• Moderação: aceite
• Entrada: VDB-10848
• CPE: pronto
• CWE: CWE-94 (confirmado)
• Exploração: Descarregar
• CVSS: 4.0 (NVD)
• EPSS: 0.08201
• KEV: não
• Atividades: muito baixo

Fontes

• MITRE: https://www.cve.org/CVERecord?id=CVE-2013-6025
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2013-6025
• CVE Details: https://www.cvedetails.com/cve/CVE-2013-6025/