CVE-2015-7994
HighSummary
The SQL interface in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'SQL Login'.
Risk Assessment
Attackers may exploit this vulnerability to gain control over the system, potentially leading to serious data security breaches.
Recommendation
It is recommended to update to the latest version of SAP HANA DB and monitor logs for unauthorized login attempts.
Other vulnerabilities in SAP HANA DB
See all- CVE-2016-6142High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to inject arbitrary audit trail fields into SYSLOG via vectors related to the SQL protocol.
- CVE-2016-6148High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement.
- CVE-2015-7993High
The Extended Application Services (XS) in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'HTTP Login'.
- CVE-2016-6143Critical
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vulnerabilities involving the audit logs.
Original NVD description (English source)
The SQL interface in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to "SQL Login," aka SAP Security Note 2197428.