CVE-2021-21484: SAP Hana

Critical severity, CVSS 9.8. EPSS: 1.3% chance of exploitation in the next 30 days.

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.

Affected products

• SAP Hana: version 2.0 only

Published 2021-03-09. Last modified 2026-06-17.