CVE-2016-6148

Mô tả

Tham khảo

• packetstormsecurity.com/files/138450/SAP-HANA-DB-1.00.73.00.389160-Remote-Code-Execution.html
• seclists.org/fulldisclosure/2016/Aug/95
• securityfocus.com/bid/92067 · Third Party Advisory
• layersevensecurity.com/wp-content/uploads/2016/02/Layer-Seven-Security_SAP-Security-Notes_January-2016.pdf · Technical Description
• onapsis.com/blog/analyzing-sap-security-notes-january-2016 · Third Party Advisory

Lỗ hổng khác của hana

• CVE-2021-21484NGHIÊM TRỌNG 9.8LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthent…
• CVE-2019-0357TRUNG BÌNH 6.7The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privil…
• CVE-2019-0284TRUNG BÌNH 6.0SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. …
• CVE-2018-2497THẤP 2.7The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax…
• CVE-2018-2465CAO 7.5SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate XML. By exploiting, …