CVE-2015-7986

HIGH 7.5CVE-2015-7986 · Published 27/10/2015 · updated 17/06/2026

In short

CVE-2015-7986 is a HIGH (CVSS 7.5) vulnerability affecting hana (sap).
Chance of exploitation in the next 30 days (EPSS): 6.2%, higher than 93.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hana sap	`≤ 1.00.095`	No fix yet

Description

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.

References

packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html · Exploit
scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review · Vendor Advisory
seclists.org/fulldisclosure/2016/Jan/94
securityfocus.com/archive/1/537376/100/0/threaded
erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption
exploit-db.com/exploits/39382

More vulnerabilities in hana

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hana

sap

≤ 1.00.095

No fix yet

More vulnerabilities in hana

See all →