Skip to contentSap Se Hana vulnerabilities
- sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 moreUnder certain conditions, SAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9...CVE-2021-276167.8 High
- sap business one, business-one-hana-chef-cookbook, sap se business one, version for sap hana (cookbooks) +2 moreSAP Business One Hana Chef Cookbook, versions - 8.82, 9.0, 9.1, 9.2, 9.3, 10.0, used to install...CVE-2021-276147.3 High
- sap hanaLDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP...CVE-2021-214847.7 High
- sap hana databaseSAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who...CVE-2021-214746.5 Medium
- sap hana databaseSAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML...CVE-2020-268344.2 Medium
- sap hana databaseSAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed...CVE-2019-03507.5 High
- sap hanaThe administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute...CVE-2019-03576.7 Medium
- sap hana extended application servicesAttackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced...CVE-2019-03644.3 Medium
- sap hana extended application servicesAttackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced...CVE-2019-03637.1 High
- sap hana extended application services, sap se hana extended application services (advanced model) +1 moreSAP HANA Extended Application Services (advanced model), version 1, allows authenticated low...CVE-2019-03064.3 Medium
- sap hanaSLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML...CVE-2019-02846.0 Medium
- sap hana extended application servicesSAP HANA extended application services, version 1, advanced does not sufficiently validate an XML...CVE-2019-02776.5 Medium
- sap hana extended application services, sap se hana extended application services, advanced model (xs advanced) +1 moreUnder certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS...CVE-2019-02667.5 High
- sap se hana extended application services, sap landscape management +1 moreUnder certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced)...CVE-2019-02619.8 Critical
- sap hanaThe security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these...CVE-2018-24972.7 Low
- sap hanaSAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not...CVE-2018-24657.5 High
- sap hana extended application servicesXS Command-Line Interface (CLI) user sessions with the SAP HANA Extended Application Services (XS...CVE-2018-24516.6 Medium
- sap hana database, ui, ui5 +3 more +5 moreSAP UI5 did not validate user input before adding it to the DOM structure. This may lead to...CVE-2018-24249.8 Critical
- sap hanaIn systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP...CVE-2018-24027.6 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given...CVE-2018-23796.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data...CVE-2018-23786.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, some general server statistics and status...CVE-2018-23776.5 Medium
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...CVE-2018-23768.1 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...CVE-2018-23758.1 High
- sap hana extended application servicesIn SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor...CVE-2018-23746.5 Medium
- sap hana extended application servicesUnder certain circumstances, a specific endpoint of the Controller's API could be misused by...CVE-2018-23737.5 High
- sap hana extended application servicesA plain keystore password is written to a system log file in SAP HANA Extended Application...CVE-2018-23726.5 Medium
- sap hanaUnder certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access...CVE-2018-23695.3 Medium
- sap hanaA remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP...CVE-2018-23625.3 Medium
- sap hana database, hana extended application services +1 moreThe user self-service tools of SAP HANA extended application services, classic user self-service,...CVE-2017-166875.3 Medium
- sap hana extended application servicesTwo potential audit log injections in SAP HANA extended application services 1.0, advanced model:...CVE-2017-166807.5 High