CVE-2016-6143
CriticalSummary
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vulnerabilities involving the audit logs.
Risk Assessment
Attackers may remotely take control of the system, potentially leading to serious data security breaches.
Recommendation
It is recommended to update SAP HANA DB to the latest version to mitigate this vulnerability.
Other vulnerabilities in SAP HANA DB
See all- CVE-2016-6142High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to inject arbitrary audit trail fields into SYSLOG via vectors related to the SQL protocol.
- CVE-2016-6148High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement.
- CVE-2015-7994High
The SQL interface in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'SQL Login'.
- CVE-2015-7993High
The Extended Application Services (XS) in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'HTTP Login'.
Original NVD description (English source)
SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.