CVE-2013-6025: Code Injection
The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-6025?
CVE-2013-6025 is considered a medium severity vulnerability due to its potential to allow unauthorized file access.
How do I fix CVE-2013-6025?
To mitigate CVE-2013-6025, upgrade to a non-affected version of SAP Sybase Adaptive Server Enterprise that is compliant with security updates.
What impact does CVE-2013-6025 have on my system?
CVE-2013-6025 allows remote authenticated users to read arbitrary files on the server, which could lead to sensitive information disclosure.
Who is affected by CVE-2013-6025?
Users of SAP Sybase Adaptive Server Enterprise 15.7 ESD 2 are affected by CVE-2013-6025.
Can CVE-2013-6025 be exploited remotely?
Yes, CVE-2013-6025 can be exploited remotely as it affects authenticated users executing SQL statements.