What’s Vulnerable › Vulnerabilities

CVE-2015-3978

• Severity: low (CVSS 2.1 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2015-05-12 · updated 2026-06-17
• Weakness: CWE-200

Description

SAP Sybase Unwired Platform Online Data Proxy allows local users to obtain usernames and passwords via the DataVault, aka SAP Security Note 2094830.

Affected products

• SAP Sybase Unwired Platform Online Data Proxy: all versions

References

• http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/
• http://www.securityfocus.com/bid/74625
• http://www.securitytracker.com/id/1032310
• https://erpscan.io/press-center/blog/sap-security-notes-april-2015/
• http://www.onapsis.com/blog/analyzing-sap-security-notes-april-2015-edition/
• http://www.securityfocus.com/bid/74625
• http://www.securitytracker.com/id/1032310
• https://erpscan.io/press-center/blog/sap-security-notes-april-2015/

Get alerted when CVE-2015-3978 or the next vulnerability affects your stack