CVE-2018-2465

SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate XML. By exploiting, an unauthorized hacker can cause the database server to crash.

Score

CVSS 3.0 7.5 High

Status

Modified - cna@sap.com

Published

2018-09-11

Last modified

2024-08-05

Weaknesses

CWE-20

Affected products

• Hana (Sap)
• Sap Hana (Sap)

References

• http://www.securityfocus.com/bid/105324
• https://launchpad.support.sap.com/#/notes/2681207
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993