SAP Rfc Library vulnerabilities

8 CVEs affecting SAP Rfc Library, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2015-2282, published 2015-06-02.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2007-1917, published 2007-04-10. High severity, CVSS 10.0. EPSS: 6.7% chance of exploitation in the next 30 days. Buffer overflow in the SYSTEM_CREATE_INSTANCE function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This…
CVE-2007-1916, published 2007-04-10. High severity, CVSS 10.0. EPSS: 6.7% chance of exploitation in the next 30 days. Buffer overflow in the RFC_START_GUI function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This information…
CVE-2007-1915, published 2007-04-10. High severity, CVSS 7.5. EPSS: 4.4% chance of exploitation in the next 30 days. Buffer overflow in the RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to execute arbitrary code via unspecified vectors. NOTE: This…
CVE-2015-2282, published 2015-06-02. High severity, CVSS 7.5. EPSS: 3.5% chance of exploitation in the next 30 days. Stack-based buffer overflow in the LZC decompression implementation (CsObjectInt::CsDecomprLZC function in vpa106cslzc.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver…
CVE-2007-1918, published 2007-04-10. Medium severity, CVSS 5.0. EPSS: 2.5% chance of exploitation in the next 30 days. The RFC_SET_REG_SERVER_PROPERTY function in the SAP RFC Library 6.40 and 7.00 before 20070109 implements an option for exclusive access to an RFC server, which allows remote attackers to cause a…
CVE-2007-1913, published 2007-04-10. Medium severity, CVSS 5.0. EPSS: 2.2% chance of exploitation in the next 30 days. The TRUSTED_SYSTEM_SECURITY function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to verify the existence of users and groups on systems and domains via unspecified…
CVE-2015-2278, published 2015-06-02. Medium severity, CVSS 5.0. EPSS: 2.1% chance of exploitation in the next 30 days. The LZH decompression implementation (CsObjectInt::BuildHufTree function in vpa108csulzh.cpp) in SAP MaxDB 7.5 and 7.6, Netweaver Application Server ABAP, Netweaver Application Server Java, Netweaver…
CVE-2007-1914, published 2007-04-10. High severity, CVSS 7.8. EPSS: 1.7% chance of exploitation in the next 30 days. The RFC_START_PROGRAM function in the SAP RFC Library 6.40 and 7.00 before 20061211 allows remote attackers to obtain sensitive information (external RFC server configuration data) via unspecified…