Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

sybase easerver vulnerabilities and exploits

(subscribe to this query)
10
CVSSv2
CVE-2011-0496
Unspecified vulnerability in Sybase EAServer 5.x and 6.x prior to 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote malicious users to install arbitrary web services and execute arbitrary code, related to a "design vulner...
Sybase Easerver 6.0Sybase Easerver 6.0.2Sybase Easerver 5.1Sybase Easerver 5.2Sybase Appeon For Powerbuilder 2.8Sybase Appeon For Powerbuilder 6.0Sybase Appeon For Powerbuilder 6.1Sybase Easerver 6.1Sybase Easerver 6.2Sybase Easerver 5.2.1Sybase Easerver 5.3Sybase Appeon For Powerbuilder 6.2Sybase Appeon For Powerbuilder 6.5Sybase Sybase Workspace 1.7Sybase Sybase Workspace 2.0Sybase Easerver 5.0Sybase Easerver 5.0.1Sybase Appeon For Powerbuilder 2.6Sybase Appeon For Powerbuilder 2.7Sybase Sybase WorkspaceSybase Sybase Workspace 1.0Sybase Sybase Workspace 2.1
7.8
CVSSv2
CVE-2011-0497
Directory traversal vulnerability in Sybase EAServer 6.x prior to 6.3 ESD#2, as used in Appeon, Replication Server Messaging Edition (RSME), and WorkSpace, allows remote malicious users to read arbitrary files via "../\" (dot dot forward-slash backslash) sequences in a ...
Sybase Easerver 6.1Sybase Easerver 6.2Sybase Easerver 5.2.1Sybase Easerver 5.3Sybase Appeon For Powerbuilder 6.1Sybase Appeon For Powerbuilder 6.2Sybase Sybase Workspace 1.7Sybase Sybase Workspace 2.0Sybase Easerver 5.0Sybase Easerver 5.0.1Sybase Appeon For Powerbuilder 2.6Sybase Appeon For Powerbuilder 2.7Sybase Sybase WorkspaceSybase Sybase Workspace 1.0Sybase Sybase Workspace 2.1Sybase Sybase Workspace 2.1.2Sybase Easerver 6.0Sybase Easerver 6.0.2Sybase Easerver 5.1Sybase Easerver 5.2Sybase Appeon For Powerbuilder 2.8Sybase Appeon For Powerbuilder 6.0
5
CVSSv2
CVE-2011-2474
Directory traversal vulnerability in the HTTP Server in Sybase EAServer 6.3.1 Developer Edition allows remote malicious users to read arbitrary files via a /.\../\../\ sequence in a path.
Sybase Easerver 6.3.1
5
CVSSv2
CVE-2002-1861
Sybase Enterprise Application Server 4.0, when running on Windows, allows remote malicious users to retrieve files in the WEB-INF directory, which contains Java class files and configuration information, via a request to the WEB-INF directory with a trailing dot ("WEB-INF.&q...
Sybase Easerver 4.0
4.6
CVSSv2
CVE-2005-2297
Stack-based buffer overflow in TreeAction.do in Sybase EAServer 4.2.5 up to and including 5.2 allows remote authenticated users to execute arbitrary code via a large javascript parameter.
Sybase Easerver 5.2Sybase Easerver 4.2.5Sybase Easerver 5.0Sybase Easerver 5.1
4.3
CVSSv2
CVE-2012-4340
Cross-site scripting (XSS) vulnerability in Sybase EAServer prior to 6.1 allows remote malicious users to inject arbitrary web script or HTML via unspecified vectors.
Sybase Easerver 4.0Sybase Easerver 5.2.1Sybase Easerver 5.3Sybase Easerver 5.2Sybase Easerver 5.1Sybase Easerver 5.0Sybase Easerver 4.2.5Sybase Easerver 5.0.1Sybase Easerver 5.5Sybase Easerver 6.0Sybase Easerver 6.0.1Sybase Easerver
4
CVSSv2
CVE-2006-1829
EAServer Manager in Sybase EAServer 5.2 and 5.3 allows remote authenticated users, possibly guests, to obtain password credentials of arbitrary users via unspecified vectors involving (1) connection caches, (2) open password prompts, and (3) stored custom connection profiles.
Sybase Easerver 5.3Sybase Easerver 5.2
3.5
CVSSv2
CVE-2006-2539
Sybase EAServer 5.0 for HP-UX Itanium, 5.2 for IBM AIX, HP-UX PA-RISC, Linux x86, and Sun Solaris SPARC, and 5.3 for Sun Solaris SPARC does not properly protect passwords when they are being entered via the GUI, which allows local users to obtain the cleartext passwords via the g...
Sybase Easerver 5.3Sybase Easerver 5.0Sybase Easerver 5.2
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
SSTICVE-2024-35863CVE-2024-35910man-in-the-middleCVE-2024-35912CVE-2024-25742LFICVE-2024-32002CVE-2024-22120
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook