CVE-2019-0306

概要

参考情報

• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

hana extended application services のその他の脆弱性

• CVE-2019-0364中 4.3Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate …
• CVE-2019-0363高 7.1Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload t…
• CVE-2019-0277中 6.5SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated de…
• CVE-2019-0266高 7.5Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform us…
• CVE-2018-2451中 6.6XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an u…