CVE-2015-3994

CVE-2015-3994 affects SAP HANA DB (XS Engine) version 1.00.73.00.389160 (NewDB100_REL). The vulnerability resides in the grant.xsfunc application under testApps/grantAccess/, where remote authenticated attackers can spoof log entries via a crafted HTTP request. The issue is described as an improp...