CVE-2013-6025: Sybase Adaptive Server Enterprise

Medium severity, CVSS 4.0. EPSS: 8.2% chance of exploitation in the next 30 days.

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

• Sybase Adaptive Server Enterprise: version 15.7 only

Published 2013-10-19. Last modified 2026-06-16.