Nahuel Sanchez

The issue allows remote attackers to obtain sensitive TNS information via an unspecified query.

The issue allows remote attackers to inject arbitrary audit trail fields into the SYSLOG via vectors related to the SQL protocol.

The issue is related to insufficient input validation, allowing a remote attacker to cause a denial of service or execute arbitrary code via vectors related to an IMPORT statement. This can be exploited by a remote attacker to impact the system.

The issue allows remote attackers to execute arbitrary OS commands with SIDadm privileges.

The issue allows local users to obtain sensitive information by leveraging the EXPORT statement to export files.

The issue is caused by a buffer overflow in the hdbsql client of the SAP HANA database management system. This can be exploited by a local user to cause a denial of service, potentially leading to memory corruption and other unspecified impacts.

The issue concerns multiple SQL injection vulnerabilities in the Web-based Development Workbench of SAP HANA DB. These vulnerabilities allow remote authenticated users to execute arbitrary SQL commands. The vulnerabilities are related to unspecified vectors in the trace configuration page and the getSqlTraceConfiguration function.