CVE-2014-2749: SAP Hana

Medium severity, CVSS 5.0. EPSS: 1.5% chance of exploitation in the next 30 days.

The HANA ICM process in SAP HANA allows remote attackers to obtain the platform version, host name, instance number, and possibly other sensitive information via a malformed HTTP GET request.

Affected products

• SAP Hana: affected versions not specified

Published 2014-04-10. Last modified 2026-06-17.