Approved changes feed: RSS · Atom

cpe:2.3:a:sap:hana:-:*:*:*:*:*:*:*

part: a version: - update: *

VendorSap (dd5aa0c0-20b0-5c86-a937-aa29f1a33b77)
ProductHana (1f582c6a-a0d9-55fd-b662-5caedbe5deb5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2016-6150 vulnerable 2026-06-08 05:07:59.019014 Details available
The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restrictions and possibly have unspecified other impact via unknown vectors, aka SAP Security Note 2233550.
Published: 2016-08-05T14:00:00.000Z
Updated: 2024-08-06T01:22:20.619Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4018 vulnerable 2026-06-08 05:07:46.414551 Details available
The Data Provisioning Agent (aka DP Agent) in SAP HANA does not properly restrict access to service functionality, which allows remote attackers to obtain sensitive information, gain privileges, and conduct unspecified other attacks via unspecified vectors, aka SAP Security Note 2262742.
Published: 2016-04-14T14:00:00.000Z
Updated: 2024-08-06T00:17:29.994Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-4017 vulnerable 2026-06-08 05:07:46.414049 Details available
The Data Provisioning Agent (aka DP Agent) in SAP HANA allows remote attackers to cause a denial of service (process crash) via unspecified vectors, aka SAP Security Note 2262710.
Published: 2016-04-14T14:00:00.000Z
Updated: 2024-08-06T00:17:30.806Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1929 vulnerable 2026-06-08 05:07:32.367203 Details available
The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted HTTP request, related to an unspecified debug function, aka SAP Security Note 2241978.
Published: 2016-01-20T16:00:00.000Z
Updated: 2024-08-05T23:10:40.439Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2016-1928 vulnerable 2026-06-08 05:07:32.366798 Details available
Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to JSON, aka SAP Security Note 2241978.
Published: 2016-01-20T16:00:00.000Z
Updated: 2024-08-05T23:10:40.238Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8587 vulnerable 2026-06-08 05:06:09.654879 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-8313 vulnerable 2026-06-08 05:06:08.380560 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-5172 vulnerable 2026-06-08 05:05:47.082839 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2014-2749 vulnerable 2026-06-08 05:05:29.758808 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.