CVE-2018-2374: SAP Hana Extended Application Services

Medium severity, CVSS 6.5. EPSS: 1.2% chance of exploitation in the next 30 days.

In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space.

Affected products

• SAP Hana Extended Application Services: version 1.0 only

Published 2018-02-14. Last modified 2026-06-17.