CVE-2015-7992

MEDIUM 4.0CVE-2015-7992 · Published 10/11/2015 · updated 17/06/2026

In short

CVE-2015-7992 is a MEDIUM (CVSS 4.0) vulnerability affecting hana (sap).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 75.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hana sap	`= 1.00.73.00.389160`	No fix yet

Description

SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to cause a denial of service (memory corruption and indexserver crash) via unspecified vectors to the EXECUTE_SEARCH_RULE_SET stored procedure, aka SAP Security Note 2175928.

References

packetstormsecurity.com/files/134284/SAP-HANA-EXECUTE_SEARCH_RULE_SET-Stored-Procedure-Memory-Corruption.html
scn.sap.com/community/security/blog/2015/08/18/sap-security-notes-august-2015
seclists.org/fulldisclosure/2015/Nov/38
onapsis.com/research/security-advisories/SAP_HANA_EXECUTE_SEARCH_RULE_SET_Stored_Procedure_Memory_corruption

More vulnerabilities in hana

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hana

sap

= 1.00.73.00.389160

No fix yet

More vulnerabilities in hana

See all →