Login Request a demo
HA
Product
Hana
by Sap · last CVE Mar 9, 2021
38
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities38In the news0Timeline
Severity mix
Critical 5High 7Medium 4Low 1
Severity
All severities38Critical5High7Medium4Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Hana to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2021-21484
9.8
1%
Mar 9
LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind
Affected: 2.0
CVE-2016-6143
9.8
4%
Apr 13
SAP HANA DB 1.00.73.00.389160 allows remote attackers to execute arbitrary code via vectors involving the audit logs, aka SAP Security Note 2170806
Affected: 1.00.73.00.389160
CVE-2016-6150
9.8
3%
Aug 5
The multi-tenant database container feature in SAP HANA does not properly encrypt communications, which allows remote attackers to bypass intended access restrictions and possibly…
Affected: All versions, or not specified
CVE-2016-1928
9.8
6%
Jan 20
Buffer overflow in the XS engine (hdbxsengine) in SAP HANA allows remote attackers to cause a denial of service or execute arbitrary code via a crafted HTTP request, related to…
Affected: All versions, or not specified
CVE-2016-1929
9.3
2%
Jan 20
The XS engine in SAP HANA allows remote attackers to spoof log entries in trace files and consequently cause a denial of service (disk consumption and process crash) via a crafted…
Affected: All versions, or not specified
Showing 5