CVE-2014-5171
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that...
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
Exploit likelihood
What each source reports
NVD Score used
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
- Record
CVE-2014-5171- CVSS 2.0
- 2.9 Low
AV:A/AC:M/Au:N/C:P/I:N/A:N - Weakness
- CWE-310
- Updated
- 2026-11-02
CVE List No score
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
- Record
CVE-2014-5171- Updated
- 2026-11-02
EUVDEUVD-2014-5069 No score
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
- Record
EUVD-2014-5069- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-733c-h8w7-7f72 No score
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that...
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
- Record
GHSA-733c-h8w7-7f72- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-5171 is a low vulnerability (CVSS 2.9) in Sap Hana Extended Application Services, published July 31, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.52%, the 74th percentile. No source names a fixed version.
References
onapsis.com/resources/get.php?resid=adv_onapsis-2014-021
service.sap.com/sap/support/notes/1963932
securityfocus.com/bid/68947
seclists.org/fulldisclosure/2014/Jul/149
scn.sap.com/docs/DOC-8218
packetstormsecurity.com/files/127666/SAP-HANA-XS-Missing-Encryption.html
nvd.nist.gov/vuln/detail/CVE-2014-5171
github.com/advisories/GHSA-733c-h8w7-7f72