Sap Hana Extended Application Services (Sap Se) - vulnerabilities (CVEs)
14 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2025-02-11. Vendor: Sap Se.
CVEs of Sap Hana Extended Application Services
- CVE-2025-24868 - CVSS 7.1 (high), 2025-02-11: The User Account and Authentication service (UAA) for SAP HANA extended application services, advanced model (SAP HANA XS advanced model) allows an…
- CVE-2019-0363 - CVSS 7.1 (high), 2019-09-10: Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to overload the server or…
- CVE-2019-0364 - CVSS 4.3 (medium), 2019-09-10: Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.
- CVE-2019-0277 - CVSS 6.5 (medium), 2019-03-12: SAP HANA extended application services, version 1, advanced does not sufficiently validate an XML document accepted from an authenticated developer with…
- CVE-2019-0266 - CVSS 7.5 (high), 2019-02-15: Under certain conditions SAP HANA Extended Application Services, version 1.0, advanced model (XS advanced) writes credentials of platform users to a trace…
- CVE-2019-0261 - CVSS 9.8 (critical), 2019-02-15: Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS…
- CVE-2018-2374 - CVSS 6.5 (medium), 2018-02-14: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application…
- CVE-2018-2377 - CVSS 6.5 (medium), 2018-02-14: In SAP HANA Extended Application Services, 1.0, some general server statistics and status information could be retrieved by unauthorized users.
- CVE-2018-2373 - CVSS 7.5 (high), 2018-02-14: Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver…
- CVE-2018-2376 - CVSS 8.1 (high), 2018-02-14: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application…
- CVE-2018-2379 - CVSS 6.5 (medium), 2018-02-14: In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific…
- CVE-2018-2372 - CVSS 6.5 (medium), 2018-02-14: A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL…
- CVE-2018-2375 - CVSS 8.1 (high), 2018-02-14: In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application…
- CVE-2018-2378 - CVSS 6.5 (medium), 2018-02-14: In SAP HANA Extended Application Services, 1.0, unauthorized users can read statistical data about deployed applications including resource consumption.
