CVEvulnerability
CVE-2018-2465
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-09-11
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 5.0 MEDIUM — AV:N/AC:L/Au:N/C:N/I:N/A:P
- Weaknesses
- CWE-20
Description
SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate XML. By exploiting, an unauthorized hacker can cause the database server to crash.
Affected configurations
• sap hana 1.0
• sap hana 2.0
Related
Weakness · CWE (1)
- CWE-20 Improper Input Validation weakness
References
- http://www.securityfocus.com/bid/105324 Third Party Advisory, VDB Entry
- https://launchpad.support.sap.com/#/notes/2681207 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 Vendor Advisory
- http://www.securityfocus.com/bid/105324 Third Party Advisory, VDB Entry
- https://launchpad.support.sap.com/#/notes/2681207 Permissions Required, Vendor Advisory
- https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 Vendor Advisory