Vulnerabilities > SAP > Hana
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2015-05-29 | CVE-2015-3994 | Improper Input Validation vulnerability in SAP Hana 1.00.73.00.389160 The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818. | 4.0 |
| 2015-02-27 | CVE-2015-2072 | Cross-site Scripting vulnerability in SAP Hana 1.00.73.00.389160/1.00.80.00.391861 Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA Developer Edition 80 (1.00.80.00.391861) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) ide/core/plugins/editor/templates/trace/hanaTraceDetailService.xsjs or (2) xs/ide/editor/templates/trace/hanaTraceDetailService.xsjs, aka SAP Note 2069676. | 4.3 |
| 2014-11-04 | CVE-2014-8588 | SQL Injection vulnerability in SAP Hana 1.00.60.379371 SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors. | 7.5 |
| 2014-10-16 | CVE-2014-8314 | Cross-Site Scripting vulnerability in SAP Hana Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) epm/admin/DataGen.xsjs or (2) epm/services/multiply.xsjs in the democontent. | 4.3 |
| 2014-10-16 | CVE-2014-8313 | Code Injection vulnerability in SAP Hana Eval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows remote attackers to execute arbitrary XSJX code via unspecified vectors. | 6.0 |
| 2014-07-31 | CVE-2014-5172 | Cross-Site Scripting vulnerability in SAP Hana Multiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors. | 4.3 |
| 2014-04-10 | CVE-2014-2749 | Information Exposure vulnerability in SAP Hana The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request. | 5.0 |