CVE-2022-41259: SAP SQL Anywhere

Medium severity, CVSS 6.5. EPSS: 0.8% chance of exploitation in the next 30 days.

SAP SQL Anywhere - version 17.0, allows an authenticated attacker to prevent legitimate users from accessing a SQL Anywhere database server by crashing the server with some queries that use an ARRAY constructor.

Affected products

• SAP SQL Anywhere: version 17.0 only

Published 2022-11-08. Last modified 2026-06-17.