CVE-2016-3639: SAP Hana DB

Medium severity, CVSS 4.3. EPSS: 1.5% chance of exploitation in the next 30 days.

SAP HANA DB 1.00.091.00.1418659308 allows remote attackers to obtain sensitive topology information via an unspecified HTTP request, aka SAP Security Note 2176128.

Affected products

• SAP Hana DB: version 1.00.091.00.1418659308 only

Published 2016-09-26. Last modified 2026-06-17.