CVE-2019-0261

2019-02-1518:00:00

sap

www.cve.org

9.7 High

AI Score

Confidence

High

0.013 Low

EPSS

Percentile

85.6%

JSON

Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HANA 2 SPS0 (second S stands for stack)).

CNA Affected

[
  {
    "product": "SAP HANA Extended Application Services",
    "vendor": "SAP SE",
    "versions": [
      {
        "status": "affected",
        "version": "< 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP                                                                                                               HANA 2 SPS0 (second S stands for stack)"
      }
    ]
  }
]