Known vulnerabilities in SAP HANA

Vendor: SAP
Software: SAP HANA
Software CPE: cpe:2.3:a:sap:sap_hana:*:*:*:*:*:*:*:*
Website: https://www.sap.com/
Total vulnerabilities: 17
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting SAP HANA SAP HANA is affected by 17 known vulnerabilities: 1 high, 4 medium, 12 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU121195 - Permissions, Privileges, and Access Controls
CVE-2026-0492		 CWE-264 Medium
No
No
 - 13.01.2026 SB2026011338
#VU118536 - Improper Authentication
CVE-2025-42885		 CWE-287 Medium
No
No
 - 14.11.2025 SB2025111444
#VU103768 - URL Redirection to Untrusted Site ('Open Redirect')
CVE-2025-24868		 CWE-601 Low
No
No
 - 11.02.2025 SB2025021152
#VU80691 - Memory corruption
CVE-2023-40308		 CWE-119 Medium
No
No
 - 12.09.2023 SB2023091261
SB2023092234
SB2023092235
and 5 more
#VU80681 - Improper Authentication
CVE-2023-40309		 CWE-287 High
No
No
 - 12.09.2023 SB2023091261
SB2023092234
SB2023092235
and 5 more
#VU50452 - Improper input validation
CVE-2021-21474		 CWE-20 Low
No
No
 - 09.02.2021 SB2021020919
#VU48825 - Improper Authentication
CVE-2020-26834		 CWE-287 Medium
No
No
 - 08.12.2020 SB2020120812
#VU17657 - Exposure of sensitive information to an unauthorized actor
CVE-2019-0266		 CWE-200 Low
No
No
 - 13.02.2019 SB2019021223
#VU10642 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2372		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10635 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2369		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10643 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2373		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10644 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2374		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10646 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2375		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10647 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2376		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10648 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2377		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10649 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2378		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331
#VU10650 - Exposure of sensitive information to an unauthorized actor
CVE-2018-2379		 CWE-200 Low
No
No
 - 19.02.2018 SB2018021331