Nahuel D. Sánchez

**Name of the Vulnerable Software and Affected Versions** SAP Console (aka SAPConsole) version 7.30 **Description** The issue allows local users to discover SAP Server login credentials by reading the Windows registry. **Recommendations** For SAP Console (aka SAPConsole) version 7.30, update to a version that addresses this issue, as the current version allows unauthorized access to sensitive information.

**Name of the Vulnerable Software and Affected Versions** SAP HANA DB version 1.00.091.00.1418659308 **Description** The issue allows remote attackers to obtain sensitive topology information via an unspecified HTTP request. **Recommendations** For SAP HANA DB version 1.00.091.00.1418659308, update to a version that addresses this issue, as specified in SAP Security Note 2176128.

**Name of the Vulnerable Software and Affected Versions** SAP HANA DB version 1.00.73.00.389160 **Description** The issue exists due to insufficient input validation in the Extended Application Services component of the SAP HANA database management system. This allows a remote attacker to execute arbitrary code during the HTTP server authentication procedure. **Recommendations** For SAP HANA DB version 1.00.73.00.389160, consider applying the fix provided in SAP Security Note 2197397 to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** SAP HANA DB version 1.00.73.00.389160 **Description** The issue is caused by a buffer overflow, allowing a remote authenticated user to cause a denial of service, resulting in memory corruption and indexserver crash. This can be achieved via unspecified vectors to the `EXECUTE SEARCH RULE SET` stored procedure. **Recommendations** For SAP HANA DB version 1.00.73.00.389160, consider restricting access to the `EXECUTE SEARCH RULE SET` stored procedure as a temporary workaround to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SAP HANA Database version 1.00 SPS10 and earlier **Description** The issue allows remote attackers to execute arbitrary code due to insufficient input validation. This can be achieved by sending a TrexNet packet to various methods, including `fcopydir`, `fmkdir`, `frmdir`, `getenv`, `dumpenv`, `fcopy`, `fput`, `fdel`, `fmove`, `fget`, `fappend`, `fdir`, `getTraces`, `kill`, `pexec`, `stop`, and `pythonexec`. **Recommendations** For SAP HANA Database version 1.00 SPS10 and earlier, consider disabling the affected methods until a patch is available. Restrict access to the TrexNet packet handling functionality to minimize the risk of exploitation. Avoid using the vulnerable functions in the affected API endpoints until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SAP HANA DB version 1.00.73.00.389160 **Description** The issue is related to the SQL interface in SAP HANA DB, which allows remote attackers to execute arbitrary code. This is due to insufficient input validation, and exploitation can occur during the SQL server authentication procedure. **Recommendations** For SAP HANA DB version 1.00.73.00.389160, update to a version that addresses the issue related to insufficient input validation in the SQL interface. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SAP HANA Developer Edition DB version 1.00.091.00.1418659308 **Description** The issue is related to eval injection in the Web-based Development Workbench, allowing remote authenticated users to execute arbitrary XSJS code. This is due to incorrect code generation management in the Development Workbench component of the SAP HANA database management system. Exploitation of this issue can enable a remote attacker to execute arbitrary XSJS code. **Recommendations** For SAP HANA Developer Edition DB version 1.00.091.00.1418659308, consider disabling the Development Workbench or restricting access to it until a fix is available. As a temporary workaround, restrict the execution of XSJS code in the Development Workbench to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** SAP HANA DB version 1.00.73.00.389160 **Description** The issue allows remote authenticated users to read arbitrary files via an IMPORT FROM SQL statement. **Recommendations** For SAP HANA DB version 1.00.73.00.389160, consider restricting access to the IMPORT FROM SQL statement until a patch is available.

**Name of the Vulnerable Software and Affected Versions** SAP HANA DB version 1.00.73.00.389160 **Description** The issue allows remote authenticated users to spoof log entries via a crafted request. **Recommendations** For SAP HANA DB version 1.00.73.00.389160, update to a version that addresses this issue, as specified in SAP Security Note 2109818.