CVE-2013-6025

Severity CVSS v4.0:
Pending analysis
Type:
CWE-94 Code Injection
Publication date:
19/10/2013
Last modified:
11/04/2025

Description

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Vulnerable products and versions

CPE From Up to
cpe:2.3:a:sybase:adaptive_server_enterprise:15.7:*:*:*:*:*:*:*