SQL Anywhere vulnerabilities

2 known vulnerabilities in SQL Anywhere from SAP. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.1 High severity

  SAP SQL Anywhere: Insecure Inherited Permissions

  CVE-2023-33990Jul 11, 2023SAP

  SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing the service. An attacker with low privileged account and access to the local system can write into the shared memory objects. This can be lev

• 9.8 Critical severity

  SAP SQL Anywhere: Stack-based Buffer Overflow

  CVE-2022-35299Oct 11, 2022SAPEPSS 1.23%

  SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a memory corruption, such as Stack-based buffer overflow.