Posted by Onapsis Research Team on Sep 29

Onapsis Security Advisory 2015-016: SAP HANA SQL injection in _newUser
function

1. Impact on Business
=====================

By exploiting this vulnerability an attacker could modify information
related to users of the HANA system, affecting the integrity of the data
stored.

Risk Level: Medium

2. Advisory Information
=======================

– Public Release Date: 09/29/2015
– Last Revised: 09/29/2015
– Security Advisory ID: ONAPSIS-2015-016
-…