CVE-2022-27670: SAP SQL Anywhere

Medium severity, CVSS 6.5. EPSS: 1% chance of exploitation in the next 30 days.

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use indirect identifiers.

Affected products

• SAP SQL Anywhere: version 17.0 only

Published 2022-04-12. Last modified 2026-06-17.