Sap Hana (Sap Se) - vulnerabilities (CVEs)

6 CVEs, 0 in the last 30 days, 5 known versions, newest CVE from 2021-03-09. Vendor: Sap Se.

CVEs of Sap Hana

• CVE-2021-21484 - CVSS 9.8 (critical), 2021-03-09: LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.
• CVE-2019-0357 - CVSS 6.7 (medium), 2019-09-10: The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges.
• CVE-2019-0284 - CVSS 6 (medium), 2019-04-10: SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. The attacker can…
• CVE-2018-2402 - CVSS 8.4 (high), 2018-03-14: In systems using the optional capture & replay functionality of SAP HANA, 1.00 and 2.00, (see SAP Note 2362820 for more information about capture & replay),…
• CVE-2018-2369 - CVSS 5.3 (medium), 2018-02-14: Under certain conditions SAP HANA, 1.00, 2.00, allows an unauthenticated attacker to access information which would otherwise be restricted. An attacker can…
• CVE-2018-2362 - CVSS 5.3 (medium), 2018-01-09: A remote unauthenticated attacker, SAP HANA 1.00 and 2.00, could send specially crafted SOAP requests to the SAP Startup Service and disclose information such…