What’s Vulnerable › Vulnerabilities

CVE-2014-8588

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.3% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2014-11-04 · updated 2026-06-17
• Weakness: CWE-89

Description

SQL injection vulnerability in metadata.xsjs in SAP HANA 1.00.60.379371 allows remote attackers to execute arbitrary SQL commands via unspecified vectors.

Affected products

• SAP SE SAP HANA: 1.00.60.379371

References

• https://erpscan.io/advisories/erpscan-14-013-sap-hana-metadata-xsjs-sql-injection/
• https://erpscan.io/press-center/blog/sap-critical-patch-update-october-2014/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98579
• https://service.sap.com/sap/support/notes/2067972
• https://erpscan.io/advisories/erpscan-14-013-sap-hana-metadata-xsjs-sql-injection/
• https://erpscan.io/press-center/blog/sap-critical-patch-update-october-2014/
• https://exchange.xforce.ibmcloud.com/vulnerabilities/98579
• https://service.sap.com/sap/support/notes/2067972

Get alerted when CVE-2014-8588 or the next vulnerability affects your stack