[Onapsis Security Advisory 2015-015] SAP HANA SQL injection in _modifyUser function

Posted by Onapsis Research Team on Sep 29

Onapsis Security Advisory 2015-015: SAP HANA SQL injection in
_modifyUser function

1. Impact on Business
=====================

By exploiting this vulnerability an attacker could modify information
related to users of the HANA system, affecting the integrity of the data
stored.

Risk Level: Medium

2. Advisory Information
=======================

– Public Release Date: 09/29/2015
– Last Revised: 09/29/2015
– Security Advisory ID:…

Leave a Reply