CVE-2016-1929

The CVE-2016-1929 vulnerability affects the SAP HANA XS engine and allows remote attackers to spoof log entries in trace files, causing denial of service (disk consumption and process crash) via a crafted HTTP request related to an unspecified debug function (SAP Security Note 2241978). No exploi...

PT-2016-1129

Name of the Vulnerable Software and Affected Versions SAP HANA affected versions not specified Description The issue allows remote attackers to spoof log entries in trace files, potentially causing a denial of service due to disk consumption and process crash. This is achieved via a crafted HTTP...

PT-2016-1128

Name of the Vulnerable Software and Affected Versions SAP HANA affected versions not specified Description The issue is related to a buffer overflow in the XS engine of SAP HANA, which can be exploited by remote attackers via a crafted HTTP request related to JSON. This can lead to a denial of...

CVE-2016-1929: Improper Input Validation

The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service disk consumption and process crash via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978...

CVE-2015-7993

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397...

Design/Logic Flaw

The Extended Application Services aka XS or XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397...

CVE-2015-7993

CVE-2015-7993 affects SAP HANA DB Extended Application Services (XS/XS Engine) in version 1.00.73.00.389160 (NewDB100_REL). The vulnerability enables remote arbitrary code execution via unspecified vectors related to HTTP Login (SAP Security Note 2197397). The connected sources confirm the affect...

SAP HANA hdbxsengine JSON - DoS

Application: SAP HANA Versions Affected: SAP HANA 1.00.095 Vendor URL: http://www.sap.com Bugs: DoS Reported: 28.09.2015 Vendor response: 29.09.2015 Date of Public Advisory: 12.01.2016 Reference: SAP Security Note 2241978 Author: Mathieu Geli ERPScan VULNERABILITY INFORMATION Class: DoS Impact:...

SAP HANA system exposed to security vulnerabilities, static key exists in the database-vulnerability warning-the black bar safety net

! SAP is well-known in-memory database management system HANA was traced to the presence of security vulnerabilities, static encryption key is actually stored in the database. SAP HANA is SAP ever the fastest-growing products. Vulnerability overview ERPScan researchers held in Amsterdam the black...

CVE-2015-3994

The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818...

CVE-2015-3994

The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 NewDB100REL allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818...

CVE-2015-3994

CVE-2015-3994 affects SAP HANA DB (XS Engine) version 1.00.73.00.389160 (NewDB100_REL). The vulnerability resides in the grant.xsfunc application under testApps/grantAccess/, where remote authenticated attackers can spoof log entries via a crafted HTTP request. The issue is described as an improp...

CVE-2015-1311

CVE-2015-1311 affects SAP HANA Extended Application Services (XS). The XS component allows remote attackers to inject arbitrary ABAP code through unspecified vectors, per SAP Note 2098906 and corroborated by CNVD/NVD entries. This constitutes remote code/injection potential in SAP HANA XS, with n...

CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

DEBIAN-CVE-2014-9130

scanner.c in LibYAML 0.1.5 and 0.1.6, as used in the YAML-LibYAML aka YAML-XS module for Perl, allows context-dependent attackers to cause a denial of service assertion failure and crash via vectors involving line-wrapping...

CVE-2014-5171

SAP HANA Extend Application Services XS does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network...

CVE-2014-5173

SAP HANA Extend Application Services XS allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public...

CVE-2014-5171

SAP HANA Extend Application Services XS does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network...

CVE-2014-5173

SAP HANA Extend Application Services XS allows remote attackers to bypass access restrictions via a request to a private IU5 SDK application that was once public...

CVE-2014-5171

CVE-2014-5171 concerns SAP HANA Extend Application Services (XS). The issue is that transmissions for applications using SSL form-based authentication are not encrypted, enabling remote attackers to capture credentials and other sensitive data by sniffing the network. The affected component is th...