Vulnerability in Sap Sap_db

CVE-2003-0940

Directory traversal vulnerability in sqlfopenc for web-tools in SAP DB before 7.4.03.30 allows remote attackers to read arbitrary files via .. (dot dot) sequences in a URL.

EPSS: 0.016 (72.5th percentile) — read the EPSS interpretation.

Affected products

References

  • cve@mitre.org (x_refsource_ATSTAKE, Exploit, vendor-advisory, Patch, Vendor Advisory)