CVE-2008-0306: SAP Maxdb

Medium severity, CVSS 6.9. EPSS: 0.4% chance of exploitation in the next 30 days.

sdbstarter in SAP MaxDB 7.6.0.37, and possibly other versions, allows local users to execute arbitrary commands by using unspecified environment variables to modify configuration settings.

Affected products

  • SAP Maxdb: version 7.6.0.37 only

Published 2008-03-11. Last modified 2026-06-16.