VULNERABILITY INTELLIGENCE
CVE-2015-3994
CVSS score4 MEDIUM
EPSS probability1.17%
CISA KEVNot currently listed
Published2015-05-29
Last modified2026-06-17
CVSS vectorAV:N/AC:L/Au:S/C:N/I:P/A:N
Description
The grant.xsfunc application in testApps/grantAccess/ in the XS Engine in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote authenticated users to spoof log entries via a crafted request, aka SAP Security Note 2109818.
Weakness classification
- CWE-20: Improper Input Validation