CVE-2015-7993
HighSummary
The Extended Application Services (XS) in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'HTTP Login'.
Risk Assessment
Attackers may exploit this vulnerability to gain control over the system, potentially leading to serious consequences for the organization's data security.
Recommendation
It is recommended to update SAP HANA DB to the latest version and implement appropriate security measures to minimize the risk of attack.
Other vulnerabilities in SAP HANA DB
See all- CVE-2016-6142High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to inject arbitrary audit trail fields into SYSLOG via vectors related to the SQL protocol.
- CVE-2016-6148High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement.
- CVE-2015-7994High
The SQL interface in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'SQL Login'.
- CVE-2016-6143Critical
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vulnerabilities involving the audit logs.
Original NVD description (English source)
The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397.