CVE-2016-6143 SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.

CriticalCVSS 9.8 EPSS 3.6%

Published: 2017-04-13 17:00
Updated: 2026-06-17 03:50
Exploit status: No public exploit known

Sign in for asset impact Search another CVE

Description

SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.

Affected products

Product	Affected versions	Fixed in
sap hana	= 1.00.73.00.389160	No fix listed

References

92062 third-party-advisory vdb-entry
layersevensecurity.com third-party-advisory
www.onapsis.com third-party-advisory

CVSS v3.0

9.8 Critical

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector: Network
Attack Complexity: Low
Privileges Required: None
User Interaction: None
Scope: Unchanged
Confidentiality: High
Integrity: High
Availability: High

All scores (2)

v3.0 9.8 · nvd@nist.gov
v2.0 7.5 · nvd@nist.gov

Weakness & likelihood

EPSS (exploitation probability, 30 days): 3.65% (percentile 89.8)
CWE: CWE-284

Public exploit references

Metadata only. CVERadar never hosts or runs exploit code.

No public exploit references known.