SAP HANA vulnerabilities

2 vulnerabilities

Known vulnerabilities in SAP HANA, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

4CVE-2018-2497saphana+1
EPSS score
0.93%
The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE <table_name> AS SELECT.7.5CVE-2018-2465saphana+1
EPSS score
2.56%
SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate XML. By exploiting, an unauthorized hacker can cause the database server to crash.