The vulnerability of the SAP HANA Extended Application Services development tool, which stems from insufficient validation of input data, allows a perpetrator to gain unauthorized access to the list of open ports.

The vulnerability of the SAP HANA Extended Application Services development tool exists due to insufficient validation of input data. Exploiting this vulnerability can allow an attacker, operating remotely, to gain unauthorized access to the list of open ports...

SAP HANA Extended Application Services Input Validation Error Vulnerability (CNVD-2020-09649)

SAP HANA is a high-performance real-time data analytics platform from SAP. The platform provides data query functions to support users to query real-time business data query and analysis.Extended Application Services is an application server, Web server and SAP HANA System within the Web...

CVE-2019-0363

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to overload the server or retrieve information about internal network ports...

PT-2019-4339

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services versions prior to 1.0.118 Description The issue is related to insufficient input validation in the SAP HANA Extended Application Services development tool. This can be exploited by a remote attacker to ga...

PT-2019-4338

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services versions prior to 1.0.118 Description The issue is related to insufficient input validation in the SAP HANA Extended Application Services development tool. This can be exploited by an attacker to gain...

CVE-2019-0364: Undefined Security Weakness

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to enumerate open ports...

CVE-2019-0363: Undefined Security Weakness

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services Advanced model, before version 1.0.118, to overload the server or retrieve information about internal network ports...

PT-2019-4581

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services advanced model version 1 Description The issue is related to a lack of protection for service data in the SAP HANA Extended Application Services development tool. This allows an attacker to gain...

CVE-2019-0306: Undefined Security Weakness

SAP HANA Extended Application Services advanced model, version 1, allows authenticated low privileged XS Advanced Platform users such as SpaceAuditors to execute requests to obtain a complete list of SAP HANA user IDs and names...

The vulnerability of the SAP HANA Extended Application Services development tool lies in the fact that the recording of user credentials in a trace file allows an attacker to access protected information.

The vulnerability of the SAP HANA Extended Application Services development tool lies in the process of recording user credentials in a trace file. Exploiting this vulnerability can allow an attacker, operating remotely, to gain access to protected information...

PT-2019-1731

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services version 1, advanced Description The issue is related to errors in processing XML documents. It may allow a remote attacker to access protected information or cause a denial of service using a specially...

CVE-2019-0277: Improper Restriction of XML External Entity Reference

SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated developer with privileges to the SAP space XML External Entity vulnerability...

CVE-2019-0261

Under certain circumstances, SAP HANA Extended Application Services, advanced model XS advanced does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 running on SAP HANA 1 or SAP HANA 2 SPS0 second S stands for stack...

CVE-2019-0266: Insertion of Sensitive Information into Log File

Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model XS advanced writes credentials of platform users to a trace file of the SAP HANA system. Even though this trace file is protected from unauthorized access, the risk of leaking information is increased...

CVE-2019-0261: Missing Authentication for Critical Function

Under certain circumstances, SAP HANA Extended Application Services, advanced model XS advanced does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 running on SAP HANA 1 or SAP HANA 2 SPS0 second S stands for stack...

PT-2019-1733

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services version 1.0 Description The issue is related to the recording of user credentials in a trace file. This could potentially allow a remote attacker to gain access to protected information. The trace file,...

PT-2019-2024

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services versions prior to 1.0.97 Description The issue is related to insufficient authentication checks in SAP HANA Extended Application Services, which can be exploited by a remote attacker using a specially...

CVE-2018-2451

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

CVE-2018-2451: Insufficient Session Expiration

XS Command-Line Interface CLI user sessions with the SAP HANA Extended Application Services XS, version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after corresponding...

PT-2018-15573

Name of the Vulnerable Software and Affected Versions SAP HANA Extended Application Services XS version 1 Description The XS Command-Line Interface CLI user sessions may have an unintentional prolonged period of validity, allowing a platform user to access controller resources via an active CLI...