Every CVE whose affected-product data names Sap Sql Anywhere, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.
CVEs (8)
CVE-2022-35299 — CVSS 9.8 (critical): SAP SQL Anywhere - version 17.0, and SAP IQ - version 16.1, allows an attacker to leverage logical errors in memory management to cause a…
CVE-2023-33990 — CVSS 7.8 (high): SAP SQL Anywhere - version 17.0, allows an attacker to prevent legitimate users from accessing the service by crashing the service. An…
CVE-2014-9264 — CVSS 7.5 (high): Stack-based buffer overflow in the .NET Data Provider in SAP SQL Anywhere allows remote attackers to execute arbitrary code via a crafted…
CVE-2022-27670 — CVSS 6.5 (medium): SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server…
CVE-2022-41259 — CVSS 6.5 (medium): SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server…
CVE-2019-0381 — CVSS 5.5 (medium): A binary planting in SAP SQL Anywhere, before version 17.0, SAP IQ, before version 16.1, and SAP Dynamic Tier, before versions 1.0 and 2.0…
CVE-2015-2819 — CVSS 5.0 (medium): SAP Sybase SQL Anywhere 11 and 16 allows remote attackers to cause a denial of service (crash) via a crafted request, aka SAP Security Note…
CVE-2016-10310 — CVSS 4.9 (medium): Buffer overflow in the MobiLink Synchronization Server component in SAP SQL Anywhere 17 and possibly earlier allows remote authenticated…