15.7

DATE	CVE	VULNERABILITY TITLE	RISK
2018-04-24	CVE-2013-7245	Improper Authorization vulnerability in Sybase Adaptive Server Enterprise 15.7 The Backup Server component in SAP Sybase ASE 15.7 before SP51 allows remote attackers to bypass access restrictions and perform database dumps by leveraging failure to validate credentials, aka SAP Security Note 1927859. network low complexity sybase CWE-285	7.5
2016-11-03	CVE-2016-7402	Permissions, Privileges, and Access Controls vulnerability in Sybase Adaptive Server Enterprise SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc import_sproc SQL injection. network low complexity sybase CWE-264 critical	9.8