CVE-2016-6142
HighSummary
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to inject arbitrary audit trail fields into SYSLOG via vectors related to the SQL protocol.
Risk Assessment
Attackers may manipulate audit data, leading to loss of log integrity and hindering the detection of unauthorized activities.
Recommendation
It is recommended to update SAP HANA DB to the latest version and implement appropriate security measures to protect against SQL injections.
Other vulnerabilities in SAP HANA DB
See all- CVE-2016-6148High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement.
- CVE-2015-7994High
The SQL interface in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'SQL Login'.
- CVE-2015-7993High
The Extended Application Services (XS) in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'HTTP Login'.
- CVE-2016-6143Critical
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vulnerabilities involving the audit logs.
Original NVD description (English source)
SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP Security Note 2197459.