CVE-2015-2819 SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash) via a crafted request, aka SAP Security Note 2108161.

MediumCVSS 5.0 EPSS 2.4%

Published: 2015-04-01 17:00
Updated: 2026-06-17 03:24
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash) via a crafted request, aka SAP Security Note 2108161.

Affected products

Product	Affected versions	Fixed in
sap sql anywhere	= 11.0	No fix listed
sap sql anywhere	= 16.0	No fix listed

References

packetstormsecurity.com
20150623 ERPSCAN Research Advisory [ERPSCAN-15-010] SYBASE SQL Anywhere 12 and 16 - DoS mailing-list
20150625 [ERPSCAN-15-010] SYBASE SQL Anywhere 12 and 16 - DoS mailing-list
74317 vdb-entry
erpscan.io

CVSS v2.0

5.0 Medium

AV:N/AC:L/Au:N/C:N/I:N/A:P

Access Vector: Network
Access Complexity: Low
Authentication: None
Confidentiality: None
Integrity: None
Availability: Partial

Weakness & likelihood

EPSS (exploitation probability, 30 days): 2.40% (percentile 84.3)
CWE: CWE-20

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.