CVE-2016-3639

MEDIUM

SAP HANA DB <1.00.091.00.1418659308 - Info Disclosure

Title source: llm
STIX 2.1

Description

SAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology information via an unspecified HTTP request, aka SAP Security Note 2176128.

References (4)

Core 4
Core References
Permissions Required, Third Party Advisory x_refsource_misc
http://onapsis.com/research/security-advisories/sap-hana-get-topology-information-disclosure
Third Party Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/92547
Third Party Advisory mailing-list x_refsource_fulldisc
http://seclists.org/fulldisclosure/2016/Aug/83

Scores

CVSS v3 4.3
EPSS 0.0036
EPSS Percentile 58.1%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Details

CWE
CWE-200
Status published
Products (1)
sap/hana_db 1.00.091.00.1418659308
Published Sep 26, 2016
Tracked Since Feb 18, 2026