Nahuel D. Sánchez

The issue allows local users to discover SAP Server login credentials by reading the Windows registry.

The issue allows remote attackers to obtain sensitive topology information via an unspecified HTTP request.

The issue exists due to insufficient input validation in the Extended Application Services component of the SAP HANA database management system. This allows a remote attacker to execute arbitrary code during the HTTP server authentication procedure.

The issue is caused by a buffer overflow, allowing a remote authenticated user to cause a denial of service, resulting in memory corruption and indexserver crash. This can be achieved via unspecified vectors to the `EXECUTE SEARCH RULE SET` stored procedure.

The issue allows remote attackers to execute arbitrary code due to insufficient input validation. This can be achieved by sending a TrexNet packet to various methods, including `fcopydir`, `fmkdir`, `frmdir`, `getenv`, `dumpenv`, `fcopy`, `fput`, `fdel`, `fmove`, `fget`, `fappend`, `fdir`, `getTraces`, `kill`, `pexec`, `stop`, and `pythonexec`.

The issue is related to the SQL interface in SAP HANA DB, which allows remote attackers to execute arbitrary code. This is due to insufficient input validation, and exploitation can occur during the SQL server authentication procedure.

The issue is related to eval injection in the Web-based Development Workbench, allowing remote authenticated users to execute arbitrary XSJS code. This is due to incorrect code generation management in the Development Workbench component of the SAP HANA database management system. Exploitation of this issue can enable a remote attacker to execute arbitrary XSJS code.

The issue allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement.

The issue allows remote authenticated users to spoof log entries via a crafted request.