CVE-2018-2379: SAP Hana Extended Application Services

Medium severity, CVSS 6.5. EPSS: 0.9% chance of exploitation in the next 30 days.

In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.

Affected products

• SAP Hana Extended Application Services: version 1.0 only

Published 2018-02-14. Last modified 2026-06-17.