HA
Product
Hana
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 5High 7Medium 4Low 1
Watch
Add Hana to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2018-2402 | 8.4 | Mar 14 | In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about capture & replay), user credentials may… Affected: 1.00; 2.00 |
| CVE-2016-6144 | 8.1 | Aug 5 | The SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the password_lock_for_system_user is not supported or is… Affected: through 1.00.73.00.389160 |
| CVE-2018-2465 | 7.5 | Sep 11 | SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate XML Affected: 1.0; 2.0 |
| CVE-2016-6142 | 7.5 | Sep 26 | SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol, aka SAP… Affected: 1.00.73.00.389160 |
| CVE-2016-6148 | 7.5 | Aug 5 | SAP HANA DB 1.00.73.00.389160 allows remote attackers to cause a denial of service (process termination) or execute arbitrary code via vectors related to an IMPORT statement, aka… Affected: 1.00.73.00.389160 |
| CVE-2016-4017 | 7.5 | Apr 14 | The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka SAP Security Note 2262710 Affected: All versions, or not specified |
| CVE-2016-4018 | 7.3 | Apr 14 | The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information,… Affected: All versions, or not specified |
Showing 7