CVE-2017-8914

sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation…

published May 23, 2017

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation policy, aka SAP Security Note 2407694.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01489 · 73.7th percentile
Published
2017-05-23T03:56Z
EPSS history
Timeline
  • 23 MAY 03:56Z
    sinopia, as used in SAP HANA XS 1.00 and 2.00, allows remote attackers to hijack npm packages or host arbitrary files by leveraging an insecure user creation…
    cvelistv5