GCVE - cpe:2.3:a:sap:hana:2.0:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:sap:hana:2.0:*:*:*:*:*:*:*

part: a version: 2.0 update: *

Vendor	Sap (`dd5aa0c0-20b0-5c86-a937-aa29f1a33b77`)
Product	Hana (`1f582c6a-a0d9-55fd-b662-5caedbe5deb5`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from NVD CPE 2.0 feed

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21484`	vulnerable	2026-06-08 05:29:12.124551	Details available HIGH (7.7) LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind. Published: 2021-03-09T14:11:24.000Z Updated: 2024-08-03T18:16:22.549Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=571343107 https://launchpad.support.sap.com/#/notes/3017378	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0357`	vulnerable	2026-06-08 05:12:19.763598	Details available The administrator of SAP HANA database, before versions 1.0 and 2.0, can misuse HANA to execute commands with operating system "root" privileges. Published: 2019-09-10T16:48:14.000Z Updated: 2024-08-04T17:44:16.461Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=525962506 https://launchpad.support.sap.com/#/notes/2829681	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2019-0284`	vulnerable	2026-06-08 05:12:19.629395	Details available SLD Registration in SAP HANA (fixed in versions 1.0, 2.0) does not sufficiently validate an XML document accepted from an untrusted source. The attacker can call SLDREG with an XML file containing a reference to an XML External Entity (XXE). This can cause SLDREG to, for example, continuously loop, read arbitrary files and even send local files. Published: 2019-04-10T20:25:40.000Z Updated: 2024-08-04T17:44:16.347Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=517899114 https://launchpad.support.sap.com/#/notes/2772376	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-2497`	vulnerable	2026-06-08 05:11:37.267928	Details available The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE <table_name> AS SELECT. Published: 2018-12-11T23:00:00.000Z Updated: 2024-08-05T04:21:34.166Z Open on db.gcve.eu Reference links https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=508559699 http://www.securityfocus.com/bid/106152 https://launchpad.support.sap.com/#/notes/2704878	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2018-2465`	vulnerable	2026-06-08 05:11:37.209009	Details available SAP HANA (versions 1.0 and 2.0) Extended Application Services classic model OData parser does not sufficiently validate XML. By exploiting, an unauthorized hacker can cause the database server to crash. Published: 2018-09-11T15:00:00.000Z Updated: 2024-08-05T04:21:33.819Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/105324 https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=499356993 https://launchpad.support.sap.com/#/notes/2681207	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.