Skip to contentSap Hana vulnerabilities
- sap hana extended application servicesAttackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced...CVE-2019-03644.3 Medium
- sap hana extended application servicesAttackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced...CVE-2019-03637.1 High
- sap hana extended application services, sap se hana extended application services (advanced model) +1 moreSAP HANA Extended Application Services (advanced model), version 1, allows authenticated low...CVE-2019-03064.3 Medium
- sap hanaSLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML...CVE-2019-02846.0 Medium
- sap hana extended application servicesSAP HANA extended application services, version 1, advanced does not sufficiently validate an XML...CVE-2019-02776.5 Medium
- sap banking services from sap, s\/4hana financial products subledger, sap se banking services from sap 9.0 (fsappl) +1 more +3 moreBanking services from SAP 9.0 (FSAPPL version 5) and SAP S/4HANA Financial Products Subledger ...CVE-2019-02768.8 High
- sap hana extended application services, sap se hana extended application services, advanced model (xs advanced) +1 moreUnder certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS...CVE-2019-02667.5 High
- sap bw\/4hana, sap se bw/4hana (dw4core) +1 moreUnder some circumstances, masterdata maintenance in SAP BW/4HANA (fixed in DW4CORE version 1.0 ...CVE-2019-02438.8 High
- sap business one on hana, business one service layer (b1 on hana) +1 moreTRACE method is enabled in SAP Business One Service Layer . Attacker can use XST (Cross Site...CVE-2018-25026.1 Medium
- sap hanaThe security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these...CVE-2018-24972.7 Low
- sap hanaSAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not...CVE-2018-24657.5 High
- sap hana extended application servicesXS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS...CVE-2018-24516.6 Medium
- sap hana database, ui, ui5 +3 more +5 moreSAP UI5 did not validate user input before adding it to the DOM structure. This may lead to...CVE-2018-24249.8 Critical
- sap hanaIn systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP...CVE-2018-24027.6 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given...CVE-2018-23796.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data...CVE-2018-23786.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, some general server statistics and status...CVE-2018-23776.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...CVE-2018-23768.1 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...CVE-2018-23758.1 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...CVE-2018-23746.5 Medium
- sap hana extended application servicesUnder certain circumstances, a specific endpoint of the Controller's API could be misused by...CVE-2018-23737.5 High
- sap hana extended application servicesA plain keystore password is written to a system log file in SAP HANA Extended Application...CVE-2018-23726.5 Medium
- sap hanaUnder certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access...CVE-2018-23695.3 Medium
- sap hanaA remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP...CVE-2018-23625.3 Medium
- sap hana database, hana extended application services +1 moreThe user self-service tools of SAP HANA extended application services, classic user self-service,...CVE-2017-166875.3 Medium
- sap hana extended application servicesTwo potential audit log injections in SAP HANA extended application services 1.0, advanced model:...CVE-2017-166807.5 High
- sap hana xssinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to cause a denial of...CVE-2017-89157.5 High
- sap hana xssinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or...CVE-2017-89148.3 High
- sap hanaSAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors...CVE-2016-61439.8 Critical
- sap hanaSAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit...CVE-2016-61427.5 High
- sap hana dbSAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology...CVE-2016-36394.3 Medium
- sap hanaThe multi-tenant database container feature in SAP HANA does not properly encrypt communications,...CVE-2016-61509.8 Critical
- sap hana sps09SAP HANA SPS09 1.00.091.00.14186593 allows local users to obtain sensitive information by...CVE-2016-61495.5 Medium
- sap hanaSAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process...CVE-2016-61487.5 High
- sap hana dbThe SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for...CVE-2016-61455.3 Medium
- sap hanaThe SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for...CVE-2016-61448.1 High
- sap hana dbThe Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.091.00.1418659308...CVE-2016-36405.5 Medium
- sap hanaThe Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to...CVE-2016-40187.3 High
- sap hanaThe Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial...CVE-2016-40177.5 High
- sap hanaThe XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and...CVE-2016-19299.3 Critical
- sap hanaBuffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a...CVE-2016-19289.8 Critical
- sap hanaThe SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to...CVE-2015-79947.5 High
- sap hanaThe Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 ...CVE-2015-79937.5 High
- sap hanaSAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to cause a denial...CVE-2015-79924.0 Medium
- sap hanaThe Web Dispatcher service in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote...CVE-2015-79915.0 Medium
- sap hanaSAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote...CVE-2015-782810.0 High
- sap hanaThe index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute...CVE-2015-7986Public exploit7.5 High
- sap hanaEval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer...CVE-2015-77296.5 Medium
- sap hanaCross-site scripting (XSS) vulnerability in user creation in the Web-based Development Workbench...CVE-2015-77283.5 Low
- sap hanaMultiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00...CVE-2015-77276.5 Medium
- Show moreLoading…