CVE-2016-6146

The NameServer in SAP TREX 7.10 Revision 63 allows remote attackers to obtain sensitive TNS information via an unspecified query, aka SAP Security Note 2234226.

• CWE-200

• http://onapsis.com/research/security-advisories/sap-trex-tns-information-disclosure-nameserverPermissions Required, Third Party Advisory
• http://packetstormsecurity.com/files/138445/SAP-TREX-7.10-Revision-63-NameServer-TNS-Information-Disclosure.htmlThird Party Advisory, VDB Entry
• http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--reviewVendor Advisory
• http://seclists.org/fulldisclosure/2016/Aug/93Third Party Advisory
• https://layersevensecurity.com/wp-content/uploads/2016/03/Layer-Seven-Security_SAP-Security-Notes_February-2016.pdfThird Party Advisory
• http://onapsis.com/research/security-advisories/sap-trex-tns-information-disclosure-nameserverPermissions Required, Third Party Advisory
• http://packetstormsecurity.com/files/138445/SAP-TREX-7.10-Revision-63-NameServer-TNS-Information-Disclosure.htmlThird Party Advisory, VDB Entry
• http://scn.sap.com/community/security/blog/2015/12/09/sap-security-notes-december-2015--reviewVendor Advisory
• http://seclists.org/fulldisclosure/2016/Aug/93Third Party Advisory
• https://layersevensecurity.com/wp-content/uploads/2016/03/Layer-Seven-Security_SAP-Security-Notes_February-2016.pdfThird Party Advisory

Published

Sep 27, 2016

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2016-6139SAP TREX 7.10 Revision 63 allows remote attackers to read ar…
• CVE-2016-6140SAP TREX 7.10 Revision 63 allows remote attackers to write t…
• CVE-2016-6142SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote a…
• CVE-2016-6143SAP HANA DB 1.00.73.00.389160 allows remote attackers to exe…
• CVE-2016-6144The SQL interface in SAP HANA before Revision 102 does not l…
• CVE-2016-6145The SQL interface in SAP HANA DB 1.00.091.00.1418659308 prov…
• CVE-2016-6147An unspecified interface in SAP TREX 7.10 Revision 63 allows…
• CVE-2016-6148SAP HANA DB 1.00.73.00.389160 allows remote attackers to cau…
• CVE-2016-6149SAP HANA SPS09 1.00.091.00.14186593 allows local users to ob…
• CVE-2016-6150The multi-tenant database container feature in SAP HANA does…
• CVE-2016-6151CA eHealth 6.2.x allows remote authenticated users to cause …
• CVE-2016-6152CA eHealth 6.2.x and 6.3.x before 6.3.2.13 allows remote aut…