SAP Hana Database vulnerabilities

8 CVEs affecting SAP Hana Database, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0492, published 2026-01-13.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2018-2424, published 2018-06-12. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. SAP UI5 did not validate user input before adding it to the DOM structure. This may lead to malicious user-provided JavaScript code being added to the DOM that could steal user information. Software…
CVE-2017-16687, published 2017-12-12. Medium severity, CVSS 5.3. EPSS: 1.3% chance of exploitation in the next 30 days. The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid…
CVE-2019-0350, published 2019-11-04. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. SAP HANA Database, versions 1.0, 2.0, allows an unauthorized attacker to send a malformed connection request, which crashes the indexserver of an SAP HANA instance, leading to Denial of Service
CVE-2023-40309, published 2023-09-12. Critical severity, CVSS 9.8. EPSS: 0.9% chance of exploitation in the next 30 days. SAP CommonCryptoLib does not perform necessary authentication checks, which may result in missing or wrong authorization checks for an authenticated user, resulting in escalation of privileges.…
CVE-2023-40308, published 2023-09-12. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. SAP CommonCryptoLib allows an unauthenticated attacker to craft a request, which when submitted to an open port causes a memory corruption error in a library which in turn causes the target component…
CVE-2021-21474, published 2021-02-09. Medium severity, CVSS 6.5. EPSS: 0.7% chance of exploitation in the next 30 days. SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to…
CVE-2020-26834, published 2020-12-09. Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days. SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token…
CVE-2026-0492, published 2026-01-13. High severity, CVSS 8.8. EPSS: 0.3% chance of exploitation in the next 30 days. SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could…