CVE-2016-6148
HighSummary
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement.
Risk Assessment
This vulnerability may lead to significant disruptions in system operation and allow attackers to gain control over the system.
Recommendation
It is recommended to update SAP HANA DB to the latest version to mitigate this vulnerability and implement appropriate security measures.
Other vulnerabilities in SAP HANA DB
See all- CVE-2016-6142High
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to inject arbitrary audit trail fields into SYSLOG via vectors related to the SQL protocol.
- CVE-2015-7994High
The SQL interface in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'SQL Login'.
- CVE-2015-7993High
The Extended Application Services (XS) in SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via unspecified vectors related to 'HTTP Login'.
- CVE-2016-6143Critical
SAP HANA DB version 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vulnerabilities involving the audit logs.
Original NVD description (English source)
SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement, aka SAP Security Note 2233136.