CVE-2022-27670CWE-99

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the…

published April 12, 2022

CVSS
—
EPSS
1%
Percentile
60.9
In the wild
Unconfirmed
What it is

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00952 · 60.9th percentile
Weakness
CWE-99 · Improper Control of Resource Identifiers ('Resource Injection')
Published
2022-04-12T16:11Z
EPSS history
Timeline
  • 12 APR 16:11Z
    SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the…
    cvelistv5