CVE-2019-0364: SAP Hana Extended Application Services

Medium severity, CVSS 4.3. EPSS: 0.7% chance of exploitation in the next 30 days.

Attackers may misuse an HTTP/REST endpoint of SAP HANA Extended Application Services (Advanced model), before version 1.0.118, to enumerate open ports.

Affected products

• SAP Hana Extended Application Services: before 1.0.118 (fixed in 1.0.118)

Published 2019-09-10. Last modified 2026-06-17.