Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sap hana extended application services vulnerabilities and exploits
(subscribe to this query)
2.9
CVSSv2
CVE-2014-5171
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote malicious users to obtain credentials and other sensitive information by sniffing the network.
Sap Hana Extended Application Services -
5
CVSSv2
CVE-2014-5173
SAP HANA Extend Application Services (XS) allows remote malicious users to bypass access restrictions via a request to a private IU5 SDK application that was once public.
Sap Hana Extended Application Services -
5.5
CVSSv2
CVE-2019-0363
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or retrieve information about internal network ports.
Sap Hana Extended Application Services
4
CVSSv2
CVE-2019-0364
Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.
Sap Hana Extended Application Services
10
CVSSv2
CVE-2015-1311
The Extended Application Services (XS) in SAP HANA allows remote malicious users to inject arbitrary ABAP code via unspecified vectors, aka SAP Note 2098906. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Sap Hana Extended Application Services -
4
CVSSv2
CVE-2018-2374
In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space.
Sap Hana Extended Application Services 1.0
5.5
CVSSv2
CVE-2018-2375
In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.
Sap Hana Extended Application Services 1.0
4
CVSSv2
CVE-2018-2377
In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users.
Sap Hana Extended Application Services 1.0
4
CVSSv2
CVE-2018-2378
In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption.
Sap Hana Extended Application Services 1.0
6
CVSSv2
CVE-2018-2451
XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an unintentional prolonged period of validity. Consequently, a platform user could access controller resources via active CLI session even after...
Sap Hana Extended Application Services 1.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversal
CVE-2024-33545
CVE-2024-35725
CVE-2024-32704
overflow
file upload
CVE-2024-0230
CVE-2024-32705
CVE-2024-23692
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
1
2
3
NEXT »