SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8588
Reference (s):
- https://erpscan.io/advisories/erpscan-14-013-sap-hana-metadata-xsjs-sql-injection/
- https://erpscan.io/press-center/blog/sap-critical-patch-update-october-2014/
- https://service.sap.com/sap/support/notes/2067972
- XF:sap-hana-cve20148588-sql-injection(98579)
- URL: https://exchange.xforce.ibmcloud.com/vulnerabilities/98579