Unrated severityNVD Advisory· Published Oct 19, 2013· Updated Apr 29, 2026

CVE-2013-6025

Description

The XMLParse procedure in SAP Sybase Adaptive Server Enterprise (ASE) 15.7 ESD 2 allows remote authenticated users to read arbitrary files via a SQL statement containing an XML document with an external entity declaration in conjunction with an entity reference, related to an XML External Entity (XXE) issue.

Affected products

Sybase/Adaptive Server Enterprise
cpe:2.3:a:sybase:adaptive_server_enterprise:15.7:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

www.kb.cert.org/vuls/id/303900nvdUS Government Resource
secunia.com/advisories/55377nvd
www.securityfocus.com/bid/63193nvd
www.securitytracker.com/id/1029208nvd
exchange.xforce.ibmcloud.com/vulnerabilities/88105nvd
www.exploit-db.com/exploits/38805/nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.007
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000