Hana Database (Sap) - vulnerabilities (CVEs)

8 CVEs, 0 in the last 30 days, 3 known versions, newest CVE from 2026-01-13. Vendor: Sap.

CVEs of Hana Database

• CVE-2026-0492 - CVSS 8.8 (high), 2026-01-13: SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining…
• CVE-2023-40309 - CVSS 9.8 (critical), 2023-09-12: SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user,…
• CVE-2023-40308 - CVSS 7.5 (high), 2023-09-12: SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library…
• CVE-2021-21474 - CVSS 6.5 (medium), 2021-02-09: SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for…
• CVE-2020-26834 - CVSS 5.4 (medium), 2020-12-09: SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to…
• CVE-2019-0350 - CVSS 7.5 (high), 2019-11-04: SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which crashes the indexserver of an SAP HANA…
• CVE-2018-2424 - CVSS 9.8 (critical), 2018-06-12: SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM…
• CVE-2017-16687 - CVSS 5.3 (medium), 2017-12-12: The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be…