CVE-2019-0277

Description

References

• securityfocus.com/bid/107356 · Third Party Advisory
• launchpad.support.sap.com · Permissions Required
• wiki.scn.sap.com/wiki/pages/viewpage.action · Vendor Advisory

hana extended application services 的其他漏洞

• CVE-2019-0364中危 4.3Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate …
• CVE-2019-0363高危 7.1Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload t…
• CVE-2019-0306中危 4.3SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as S…
• CVE-2019-0266高危 7.5Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform us…
• CVE-2018-2451中危 6.6XS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS), version 1, advanced server may have an u…