Maxdb (Sap) - vulnerabilities (CVEs)
8 CVEs, 0 in the last 30 days, 9 known versions, newest CVE from 2018-08-14. Vendor: Sap.
CVEs of Maxdb
- CVE-2018-2450 - CVSS 7.2 (high), 2018-08-14: SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read,…
- CVE-2015-2282 - CVSS 7.5 (high), 2015-06-02: Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6,…
- CVE-2015-2278 - CVSS 5 (medium), 2015-06-02: The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP,…
- CVE-2010-1185 - CVSS 10 (critical), 2010-03-29: Stack-based buffer overflow in serv.exe in SAP MaxDB 7.4.3.32, and 7.6.0.37 through 7.6.06 allows remote attackers to execute arbitrary code via an invalid…
- CVE-2008-1810 - CVSS 4.4 (medium), 2008-08-01: Untrusted search path vulnerability in dbmsrv in SAP MaxDB 7.6.03.15 on Linux allows local users to gain privileges via a modified PATH environment variable.
- CVE-2008-0306 - CVSS 6.9 (medium), 2008-03-11: sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to…
- CVE-2008-0307 - CVSS 9.3 (critical), 2008-03-11: Integer signedness error in vserver in SAP MaxDB 7.6.0.37, and possibly other versions, allows remote attackers to execute arbitrary code via unknown vectors…
- CVE-2008-0244 - CVSS 10 (critical), 2008-01-12: SAP MaxDB 7.6.03 build 007 and earlier allows remote attackers to execute arbitrary commands via "&&" and other shell metacharacters in exec_sdbinfo and other…
