CVE-2018-2465

概要

参考情報

• securityfocus.com/bid/105324 · Third Party Advisory
• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

hana のその他の脆弱性

• CVE-2021-21484緊急 9.8LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthent…
• CVE-2019-0357中 6.7The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privil…
• CVE-2019-0284中 6.0SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. …
• CVE-2018-2497低 2.7The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax…
• CVE-2018-2402高 8.4In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about ca…