SAP HANA DB Grant.xsfunc Application Log Spoofing Vulnerability

CVE-2015-3994 · MEDIUM Severity

AV:N/AC:L/AU:S/C:N/I:P/A:N

The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818.

Learn more about our User Device Pen Test.