CVE-2018-2378

Mô tả

Tham khảo

• blogs.sap.com/2018/02/13/sap-security-patch-day-february-2018 · Vendor Advisory
• launchpad.support.sap.com · Permissions Required

Lỗ hổng khác của hana extended application services

• CVE-2019-0364TRUNG BÌNH 4.3Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate …
• CVE-2019-0363CAO 7.1Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload t…
• CVE-2019-0306TRUNG BÌNH 4.3SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as S…
• CVE-2019-0277TRUNG BÌNH 6.5SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated de…
• CVE-2019-0266CAO 7.5Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform us…