CVE-2016-7402

—

CVSS 3.0

9.8 critical

EPSS

1%p63

Published

Nov 3, 2016 (Nov 3, 2016)

Modified

Jun 17, 2026

Description

SAP ASE 16.0 SP02 PL03 and prior versions allow attackers who own SourceDB and TargetDB databases to elevate privileges to sa (system administrator) via dbcc import_sproc SQL injection.

Vendors: sybase
Products: adaptive server enterprise
Weakness: CWE-264
Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.