Sap Db
Vendor:
First CVE: May 27, 2003 · Active for 23 years
13
Total CVEs
More Total CVEs than 91% of tracked products
4.3
Avg CVEs / Year
Higher CVE frequency than 86% of tracked products
6.9
Avg CVSS
Higher Avg CVSS than 40% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Sap Db over time
Volume of CVEsAvg CVSS Base Score
First CVE
May 27, 2003
23 years ago
Most Recent CVE
Jul 6, 2007
6,960 days ago
CVE Severity & Scoring
Sap Db13 CVEs
23%
77%
All CVEs352,713 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown13 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown13 (100.0%)
User Interaction
None0 (0.0%)
Unknown13 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown13 (100.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-3614HIGH Multiple stack-based buffer overflows in waHTTP.exe (aka the SAP DB Web Server) in SAP DB, possibly 7.3 through 7.5, allow remote attackers to execute arbitrary code via (1) a cert | Jul 6, 2007 | 7.5 | 74 | NO | YES |
CVE-2003-0265MEDIUM Race condition in SDBINST for SAP database 7.3.0.29 creates critical files with world-writable permissions before initializing the setuid bits, which allows local attackers to gain | May 27, 2003 | 6.2 | 30 | NO | YES |
CVE-2002-1576HIGH lserver in SAP DB 7.3 and earlier uses the current working directory to find and execute the lserversrv program, which allows local users to gain privileges with a malicious lserve | Apr 15, 2004 | 7.2 | 27 | NO | YES |
CVE-2003-0944HIGH Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI. | Dec 15, 2003 | 7.5 | 25 | NO | NO |
CVE-2003-0939HIGH eo420_GetStringFromVarPart in veo420.c for SAP database server (SAP DB) 7.4.03.27 and earlier may allow remote attackers to execute arbitrary code via a connect packet with a 256 b | Dec 15, 2003 | 7.5 | 20 | NO | NO |
CVE-2003-0942HIGH Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin. | Dec 15, 2003 | 7.5 | 20 | NO | NO |
CVE-2003-0941HIGH web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa. | Dec 15, 2003 | 7.5 | 19 | NO | NO |
CVE-2003-0943HIGH web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redire | Dec 15, 2003 | 7.5 | 19 | NO | NO |
CVE-2003-0945HIGH The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities. | Dec 15, 2003 | 7.5 | 19 | NO | NO |
CVE-2003-1033HIGH The (1) instdbmsrv and (2) instlserver programs in SAP DB Development Tools 7.x trust the user-provided INSTROOT environment variable as a path when assigning setuid permissions to | Apr 15, 2004 | 7.2 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
1 CVE
7.7% of CVEs· 97th percentile
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
3 CVEs
23.1% of CVEs· 90th percentile
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Sap Db
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.5 | 1 | 7.5 | 70.0% | 0 | 1 |
| 7.4.3.7_beta | 2 | 6.8 | 35.4% | 0 | 2 |
| 7.4.3 | 1 | 7.5 | 70.0% | 0 | 1 |
| 7.4.03.30 | 1 | 7.5 | 70.0% | 0 | 1 |
| 7.4.03.29 | 1 | 7.5 | 70.0% | 0 | 1 |
| 7.4 | 2 | 7.3 | 35.2% | 0 | 1 |
| 7.3.29 | 2 | 6.8 | 35.4% | 0 | 2 |
| 7.3.00 | 3 | 7.3 | 23.8% | 0 | 2 |