CVE-2014-2749
The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host...
The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.
Exploit likelihood
What each source reports
NVD Score used
The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.
- Record
CVE-2014-2749- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-200
- Updated
- 2026-11-02
CVE List No score
The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.
- Record
CVE-2014-2749- Updated
- 2026-11-02
EUVDEUVD-2014-2776 No score
The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.
- Record
EUVD-2014-2776- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-3q9q-4xjv-8vc9 No score
The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host...
The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.
- Record
GHSA-3q9q-4xjv-8vc9- Weakness
- CWE-200
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-2749 is a medium vulnerability (CVSS 5.0) in Sap Hana, published April 10, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.51%, the 74th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/92325
onapsis.com/get.php?resid=adv_onapsis-2014-001
securityfocus.com/bid/66675
secunia.com/advisories/57443
service.sap.com/sap/support/notes/1914778
nvd.nist.gov/vuln/detail/CVE-2014-2749
github.com/advisories/GHSA-3q9q-4xjv-8vc9