CVE-2018-2372: SAP Hana Extended Application Services

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

A plain keystore password is written to a system log file in SAP HANA Extended Application Services, 1.0, which could endanger confidentiality of SSL communication.

Affected products

  • SAP Hana Extended Application Services: version 1.0 only

Published 2018-02-14. Last modified 2026-06-17.