Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
sap hana vulnerabilities and exploits
(subscribe to this query)
668
VMScore
CVE-2016-6143
SAP HANA DB 1.00.73.00.389160 allows remote malicious users to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.
Sap Hana 1.00.73.00.389160
668
VMScore
CVE-2017-7691
A code injection vulnerability exists in SAP TREX / Business Warehouse Accelerator (BWA). The vendor response is SAP Security Note 2419592.
Sap Trex -
1 Article
668
VMScore
CVE-2016-6150
The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote malicious users to bypass intended access restrictions and possibly have unspecified other impact via unknown vectors, aka SAP Security Note 2233550.
Sap Hana -
668
VMScore
CVE-2016-4018
The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote malicious users to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security...
Sap Hana -
668
VMScore
CVE-2015-7993
The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote malicious users to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397.
Sap Hana 1.00.73.00.389160
668
VMScore
CVE-2015-7994
The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote malicious users to execute arbitrary code via unspecified vectors related to "SQL Login," aka SAP Security Note 2197428.
Sap Hana 1.00.73.00.389160
668
VMScore
CVE-2015-4159
SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote malicious users to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892.
Sap Hana Web-based Development Workbench -
668
VMScore
CVE-2014-8588
SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote malicious users to execute arbitrary SQL commands via unspecified vectors.
Sap Hana 1.00.60.379371
668
VMScore
CVE-2014-8587
SAPCRYPTOLIB prior to 5.555.38, SAPSECULIB, and CommonCryptoLib prior to 8.4.30, as used in SAP NetWeaver AS for ABAP and SAP HANA, allows remote malicious users to spoof Digital Signature Algorithm (DSA) signatures via unspecified vectors.
Sap Commoncryptolib
Sap Sapcryptolib
Sap Sapseculib -
Sap Hana -
Sap Netweaver
641
VMScore
CVE-2021-27616
Under certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install SAP Business One for SAP HANA, allows an malicious user to exploit an insecure temporary backup path and to access information which would otherwise be restri...
Sap Business One 9.2
Sap Business One 9.3
Sap Business One 10.0
Sap Business One 9.1
Sap Business One 9.0
Sap Business One 8.82
Sap Business-one-hana-chef-cookbook 0.1.7
Sap Business-one-hana-chef-cookbook 0.1.19
Sap Business-one-hana-chef-cookbook 0.1.6
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-23316
SQL injection
type confusion
CVE-2024-20697
CVE-2024-4344
local
CVE-2024-30043
CVE-2024-3821
CVE-2024-5041
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
NEXT »