NVD

Id
25562  
Name
CVE-2015-3994  
Description
The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818.  
Reject
 
CVSS Version
2  
CVSS Score
4  
Severity
Medium  
CVSS Base Score
4  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-05-29  
Modified Date
2016-12-05  
Seq
2015-3994  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
135012 25562 CVE-2015-3994 http://packetstormsecurity.com/files/132067/SAP-HANA-Log-Injection.html  View
135013 25562 CVE-2015-3994 20150527 [Onapsis Security Advisory 2015-007] SAP HANA Log Injection Vulnerability  View
135014 25562 CVE-2015-3994 http://www.onapsis.com/research/security-advisories/SAP-HANA-Log-Injection-Vulnerability-in-Extended-Application-Services  View
135015 25562 CVE-2015-3994 20150527 [Onapsis Security Advisory 2015-007] SAP HANA Log Injection Vulnerability  View
135016 25562 CVE-2015-3994 74859  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
7538 JVNDB-2015-002858 SAP HANA DB の XS Engine の testApps/grantAccess/ の grant.xsfunc アプリケーションにおけるログエントリを偽装される脆弱性 SAP HANA DB の XS Engine の testApps/grantAccess/ の grant.xsfunc アプリケーションには、ログエントリを偽装される脆弱性が存在します。 CVE-2015-3994 81219 CVE-2015-3994 25562 4 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002858.html 2015-05-27 2015-06-02 View