Approved changes feed: RSS · Atom
cpe:2.3:a:sap:sap_db:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Sap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77) |
|---|---|
| Product | Sap Db (e843cfaa-7fef-51d8-b4dc-b3249da584ee) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2003-0945 |
vulnerable | 2026-06-08 04:47:22.873298 |
Details available
The Web Database Manager in web-tools for SAP DB before 7.4.03.30 generates predictable session IDs, which allows remote attackers to conduct unauthorized activities.
Published: 2003-11-21T05:00:00.000Z
Updated: 2024-08-08T02:12:35.297Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0944 |
vulnerable | 2026-06-08 04:47:22.873040 |
Details available
Buffer overflow in the WAECHO default service in web-tools in SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a URL with a long requestURI.
Published: 2003-11-21T05:00:00.000Z
Updated: 2024-09-16T22:36:03.437Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0943 |
vulnerable | 2026-06-08 04:47:22.872799 |
Details available
web-tools in SAP DB before 7.4.03.30 installs several services that are enabled by default, which could allow remote attackers to obtain potentially sensitive information or redirect attacks against internal databases via (1) waecho, (2) Web SQL Interface (websql), or (3) Web Database Manager (webdbm).
Published: 2003-11-21T05:00:00.000Z
Updated: 2024-09-17T01:16:14.869Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0942 |
vulnerable | 2026-06-08 04:47:22.872553 |
Details available
Buffer overflow in Web Agent Administration service in web-tools for SAP DB before 7.4.03.30 allows remote attackers to execute arbitrary code via a long Name parameter to waadmin.wa.
Published: 2003-11-21T05:00:00.000Z
Updated: 2024-09-17T03:08:22.326Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0941 |
vulnerable | 2026-06-08 04:47:22.872302 |
Details available
web-tools in SAP DB before 7.4.03.30 allows remote attackers to access the Web Agent Administration pages and modify configuration via a direct request to waadmin.wa.
Published: 2003-11-21T05:00:00.000Z
Updated: 2024-09-17T02:52:34.249Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0940 |
vulnerable | 2026-06-08 04:47:22.872038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0939 |
vulnerable | 2026-06-08 04:47:22.871774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2003-0938 |
vulnerable | 2026-06-08 04:47:22.871410 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.