CVE-2018-2376: SAP Hana Extended Application Services

High severity, CVSS 8.1. EPSS: 0.9% chance of exploitation in the next 30 days.

In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve application environments within that space.

Affected products

• SAP Hana Extended Application Services: version 1.0 only

Published 2018-02-14. Last modified 2026-06-17.