PT-2014-6310 · Sap · Sap Hana Extended Application Services

Name of the Vulnerable Software and Affected Versions: SAP HANA Extend Application Services XS affected versions not specified Description: The issue concerns the lack of encryption for transmissions in applications that use form-based authentication with SSL, allowing remote attackers to interce...

CVE-2014-5173: Undefined Security Weakness

SAP HANA Extend Application Services XS allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public...

CVE-2014-5171: Undefined Security Weakness

SAP HANA Extend Application Services XS does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network...