Loading vulnerability details…
CVSS v3.1
N/A
EPSS
1.52%
Published
Jul 31, 2014
Modified
May 6, 2026
Public PoC / Exploit (1)
All weaponized →Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.
Description
SAP HANA Extend Application Services (XS) does not encrypt transmissions for applications that enable form based authentication using SSL, which allows remote attackers to obtain credentials and other sensitive information by sniffing the network.
Weaknesses (CWE)
Affected Products (1)
References (14)