High

DATE	CVE	VULNERABILITY TITLE	RISK
2015-06-02	CVE-2015-2282	Improper Restriction of Operations within the Bounds of a Memory Buffer vulnerability in SAP products Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver RFC SDK, GUI, RFC SDK, SAPCAR archive tool, and other products allows context-dependent attackers to cause a denial of service (crash) or possibly execute arbitrary code via unspecified vectors, aka SAP Security Note 2124806, 2121661, 2127995, and 2125316. network low complexity sap CWE-119	7.5
2007-04-10	CVE-2007-1915	Unspecified vulnerability in SAP RFC Library 6.4/7.0 Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. network low complexity sap	7.5
2007-04-10	CVE-2007-1914	Buffer Overflow and Informaiton vulnerability in SAP RFC_Start_Gui RFC Function The RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information (external RFC server configuration data) via unspecified vectors, a different vulnerability than CVE-2006-6010. network low complexity sap	7.8