CVE-2013-6865

Severity: critical (CVSS 9.0 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 3.1% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2013-11-23 · updated 2026-06-17
Weakness: CWE-94

Description

SAP Sybase Adaptive Server Enterprise (ASE) 15.0.3 before 15.0.3 ESD#4.3, 15.5 before 15.5 ESD#5.3, and 15.7 before 15.7 SP50 or 15.7 SP100 allows remote authenticated users to execute arbitrary code via unspecified vectors, aka CR732989.

Affected products

Sybase Adaptive Server Enterprise: 15.0.3, 15.5, 15.7

References

http://scn.sap.com/docs/DOC-8218
http://secunia.com/advisories/55537
http://www.sybase.com/detail?id=1099371
https://service.sap.com/sap/support/notes/1893558
http://scn.sap.com/docs/DOC-8218
http://secunia.com/advisories/55537
http://www.sybase.com/detail?id=1099371
https://service.sap.com/sap/support/notes/1893558

Get alerted when CVE-2013-6865 or the next vulnerability affects your stack