ByteOS Network

NVD Vulnerability Details :

CVE-2014-6284

Deferred

Source-cve@mitre.org

Published At-08 Jun, 2015 | 14:59

Updated At-12 Apr, 2025 | 10:46

SAP Adaptive Server Enterprise (ASE) before 15.7 SP132 and 16.0 before 16.0 SP01 allows remote attackers to bypass the challenge and response mechanism and obtain access to the probe account via a crafted response, aka SAP Security Note 2113995.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	7.5	HIGH	AV:N/AC:L/Au:N/C:P/I:P/A:P

CPE Matches

sybase>>adaptive_server_enterprise>>Versions up to 15.7(inclusive)

cpe:2.3:a:sybase:adaptive_server_enterprise:*:sp131:*:*:*:*:*:*

sybase>>adaptive_server_enterprise>>16.0

cpe:2.3:a:sybase:adaptive_server_enterprise:16.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-264	Primary	nvd@nist.gov

References

Hyperlink	Source	Resource
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200	cve@mitre.org	Exploit
https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-004/?fid=6200	af854a3a-2127-422b-91ae-364da2661108	Exploit

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History