← Vulnerability feed

Vulnerability record · CVE-2015-7986 · published 27 October 2015

CVE-2015-7986: Sap hana memory buffer overflow vulnerability

Sap · Hana

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.

7.5 CVSS 2.0 High EPSS 6.2% · top 6.7% CWE-119 · Memory buffer overflow
7.5CVSS 2.0 base score
6.2%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
12References, 2 tagged exploit
17 Jun 2026Last modified by NVD

Description

The index server (hdbindexserver) in SAP HANA 1.00.095 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via an HTTP request, aka SAP Security Note 2197428.

AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html Exploit
http://scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review Vendor Advisory
http://seclists.org/fulldisclosure/2016/Jan/94
http://www.securityfocus.com/archive/1/537376/100/0/threaded
https://erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption/
https://www.exploit-db.com/exploits/39382/
http://packetstormsecurity.com/files/135416/SAP-HANA-hdbindexserver-Memory-Corruption.html Exploit
http://scn.sap.com/community/security/blog/2015/10/14/sap-security-notes-october-2015--review Vendor Advisory
http://seclists.org/fulldisclosure/2016/Jan/94
http://www.securityfocus.com/archive/1/537376/100/0/threaded
https://erpscan.io/advisories/erpscan-15-024-sap-hana-hdbindexserver-memory-corruption/
https://www.exploit-db.com/exploits/39382/

Track CVE-2015-7986 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

10.0CVE-2015-7828Sap hana improper input validation vulnerabilitySAP HANA Database 1.00 SPS10 and earlier do not require authentication, which allows remote attackers to execute arbitrary code or have unspecified o…EPSS 6.5%9.8CVE-2021-21484Sap hana incorrect authorization vulnerabilityLDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bi…EPSS 1.2%9.8CVE-2016-6143Sap hana improper access control vulnerabilitySAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806.EPSS 3.6%9.8CVE-2016-6150Sap hana improper access control vulnerabilityThe multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended ac…EPSS 2.9%9.8CVE-2016-1928Sap hana memory buffer overflow vulnerabilityBuffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a craft…EPSS 6.2%9.3CVE-2016-1929Sap hana improper input validation vulnerabilityThe XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption an…EPSS 2.3%8.4CVE-2018-2402Sap hana information exposure vulnerabilityIn systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about capture & r…EPSS 1.5%8.1CVE-2016-6144Sap hana improper access control vulnerabilityThe SQL interface in SAP HANA before Revision 102 does not limit the number of login attempts for the SYSTEM user when the password_lock_for_system_u…EPSS 3.8%

Source: NIST National Vulnerability Database (record CVE-2015-7986), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.