Sap · Sap Hana Db · CVE-2016-6148
**Name of the Vulnerable Software and Affected Versions**
SAP HANA DB version 1.00.73.00.389160
**Description**
The issue is related to insufficient input validation, allowing a remote attacker to cause a denial of service or execute arbitrary code via vectors related to an IMPORT statement. This can be exploited by a remote attacker to impact the system.
**Recommendations**
For SAP HANA DB version 1.00.73.00.389160, consider restricting access to the IMPORT statement until a patch is available. As a temporary workaround, limit the ability to execute arbitrary code by restricting user privileges on the database. At the moment, there is no information about a newer version that contains a fix for this vulnerability.