PT-2017-14524

Name of the Vulnerable Software and Affected Versions SAP HANA Database versions 1.00 and 2.00 Description The user self-service tools of SAP HANA extended application services, classic user self-service, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could u...

SAP HANA Database SAP HANA extended application services Information Disclosure Vulnerability

SAP HANA Database is an in-memory database based on rows and columns from SAP, which provides fast querying of multidimensional data, filtering of useless data, and synchronization of multiple queries. The database provides fast querying of multidimensional data, filtering of useless data,...

The vulnerability of the SAP HANA database management system allows a hacker to execute arbitrary code.

The vulnerability of the SAP HANA database management system is related to deficiencies in access control. Exploiting this vulnerability allows a malicious actor to execute arbitrary code remotely, using vectors that include audit logs. This is referred to as SAP Security Note 2170806...

CVE-2016-6143

SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806...

SAP HANA Information Disclosure Vulnerability (CNVD-2016-13026)

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions, users can directly query and analyze a large amount of real-time business data. SAP HANA has an information disclosure vulnerability that can be exploited by attackers to obtain...

CVE-2016-6142

SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459...

SAP HANA Information Disclosure Vulnerability (CNVD-2016-08066)

SAP HANA is a real-time data analytics platform. SAP HANA has an information disclosure vulnerability. Allowing an attacker can exploit the vulnerability to gain access to sensitive information...

CVE-2016-6148

SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service process termination or execute arbitrary code via vectors related to an IMPORT statement, aka SAP Security Note 2233136...

CVE-2016-6145

The SQL interface in SAP HANA DB 1.00.091.00.1418659308 provides different error messages for failed login attempts depending on whether the username exists and is locked when the detailederroronconnect option is not supported or is configured as "False," which allows remote attackers to enumerat...

CVE-2016-6144

The SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the passwordlockforsystemuser is not supported or is configured as "False," which makes it easier for remote attackers to bypass authentication via a brute force attack, aka SAP...

SAP HANA DB Arbitrary Code Injection Vulnerability

SAP HANA DB is an in-memory, row- and column-based database from SAP. The database provides fast queries against multidimensional data, filtering out cluttered and useless data, and synchronizing the execution of multiple queries. An arbitrary code injection vulnerability exists in SAP HANA DB. A...

SAP HANA DB Local Information Disclosure Vulnerability

SAP HANA DB is an in-memory, row- and column-based database from SAP. The database provides fast queries against multidimensional data, filtering out cluttered and useless data, and synchronizing the execution of multiple queries. A local information disclosure vulnerability exists in SAP HANA DB...

SAP HANA DB Authentication Bypass Vulnerability

SAP HANA DB is an in-memory, row- and column-based database from SAP. The database provides fast queries against multidimensional data, filtering out cluttered and useless data, and synchronizing the execution of multiple queries. An authentication bypass vulnerability exists in SAP HANA DB versi...

The vulnerability of the SAP HANA database management system allows a hacker to inject arbitrary ABAP code.

The vulnerability of the SAP HANA database management system is related to incorrect code generation. Exploiting this vulnerability allows a malicious actor to inject arbitrary ABAP code remotely...

SAP HANA Buffer Overflow Vulnerability

SAP HANA is a high-performance analytics application from SAP, Germany, that provides high-performance data querying capabilities. A buffer overflow vulnerability exists in SAP HANA that allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request...

The vulnerability of the SAP HANA database management system allows a perpetrator to execute arbitrary code or trigger a service failure.

The vulnerability of the index server component hdbindexserver in the SAP HANA database management system is caused by buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or trigger a service failure using a specially crafted HTTP request...

SAP HANA Database Arbitrary Code Execution Vulnerability

SAP HANA Database is an in-memory, row- and column-based database from SAP. The database provides fast querying of multidimensional data, filtering out cluttered and useless data, and synchronized execution of multiple queries. A security vulnerability exists in SAP HANA Database 1.00 SPS10 and...

CVE-2015-7992

SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to cause a denial of service memory corruption and indexserver crash via unspecified vectors to the EXECUTESEARCHRULESET stored procedure, aka SAP Security Note 2175928...

PT-2015-2656

Name of the Vulnerable Software and Affected Versions SAP HANA Database version 1.00 SPS10 and earlier Description The issue allows remote attackers to execute arbitrary code due to insufficient input validation. This can be achieved by sending a TrexNet packet to various methods, including...

CVE-2015-7828: Improper Input Validation

SAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified other impact via a TrexNet packet to the 1 fcopydir, 2 fmkdir, 3 frmdir, 4 getenv, 5 dumpenv, 6 fcopy, 7 fput, 8 fdel, 9 fmove, 10 fget, 11 fappend, ...