Maxdb

3 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest

CVE-2018-2450 HIGH This Week

SAP MaxDB (liveCache), versions 7.8 and 7.9, allows an attacker who gets DBM operator privileges to execute crafted database queries and therefore read, modify or delete sensitive data from database. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. No vendor patch available.

SQLi Information Disclosure SAP Maxdb

NVD

CVSS 3.0

7.2

EPSS

1.7%

CVE-2015-2282 HIGH POC This Week

Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver. Rated high severity (CVSS 7.5), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service RCE SAP Buffer Overflow Gui +5

NVD

CVSS 2.0

7.5

EPSS

0.9%

CVE-2015-2278 MEDIUM POC This Month

The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver. Rated medium severity (CVSS 5.0), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.

Denial Of Service SAP Buffer Overflow Gui Maxdb +4

NVD

CVSS 2.0

5.0

EPSS

0.7%

CVE-2018-2450

EPSS 2% CVSS 7.2

HIGH This Week

SQLi Information Disclosure SAP +1

NVD

CVE-2015-2282

EPSS 1% CVSS 7.5

HIGH POC This Week

Denial Of Service RCE SAP +7

NVD

CVE-2015-2278

EPSS 1% CVSS 5.0

MEDIUM POC This Month

Denial Of Service SAP Buffer Overflow +6

NVD