5 matches found
CVE-2019-0284: Improper Restriction of XML External Entity Reference
SLD Registration in SAP HANA fixed in versions 1.0, 2.0 does not sufficiently validate an XML document accepted from an untrusted source. The attacker can call SLDREG with an XML file containing a reference to an XML External Entity XXE. This can cause SLDREG to, for example, continuously loop,...
PT-2019-11218
Name of the Vulnerable Software and Affected Versions: SAP HANA versions prior to 1.0 SAP HANA versions prior to 2.0 Description: The issue concerns insufficient validation of an XML document accepted from an untrusted source in SLD Registration. An attacker can exploit this by calling SLDREG wit...
CVE-2016-3638
SAP SLD Registration Program aka SLDREG allows local users to cause a denial of service memory corruption and process termination via a crafted HOST parameter, aka SAP Security Note 2125623...
CVE-2016-3638
SAP SLD Registration Program aka SLDREG allows local users to cause a denial of service memory corruption and process termination via a crafted HOST parameter, aka SAP Security Note 2125623...
PT-2016-5630
Name of the Vulnerable Software and Affected Versions SAP SLD Registration Program SLDREG affected versions not specified Description The issue allows local users to cause a denial of service, resulting in memory corruption and process termination, via a crafted HOST parameter. Recommendations At...