CVE-2026-44753

SAP HANA Database user self service tools allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts,...

CVE-2026-44753: Observable Response Discrepancy

SAP HANA Database user self service tools allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts,...

CVE-2026-0492: Missing Authentication for Critical Function

SAP HANA database is vulnerable to privilege escalation allowing an attacker with valid credentials of any user to switch to another user potentially gaining administrative access. This exploit could result in a total compromise of the system�s confidentiality, integrity, and availability...

EUVD-2015-7726

Malware in sbrugna...

EUVD-2019-1130

Malware in sbrugna...

EUVD-2016-4664

Malware in sbrugna...

EUVD-2016-4665

Malware in sbrugna...

EUVD-2019-1123

Malware in sbrugna...

EUVD-2020-19370

Malware in sbrugna...

EUVD-2021-8748

Malicious code in bioql PyPI...

EUVD-2021-8757

Malicious code in bioql PyPI...

CVE-2020-26834

SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token to authenticate as a user whose name is identical to the truncated username for whom the SAML...

CVE-2021-21484

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind...

CVE-2021-21484

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind...

PT-2021-14550

Name of the Vulnerable Software and Affected Versions SAP HANA Database version 2.0 Description The issue allows LDAP authentication in SAP HANA Database to be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind. Recommendations For SAP HANA Database versio...

CVE-2021-21484: Incorrect Authorization

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind...

SAP HANA Database Signature Validation Improperity Vulnerability

SAP HANA is a set of high-performance real-time data analytics platform from Germany's SAP, which supports users to query and analyze real-time business data. An improper signature validation vulnerability exists in SAP HANA Database versions 1.0 and 2.0. The vulnerability stems from the program...

CVE-2021-21474: Inadequate Encryption Strength

SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamper with it and alter it in a way that the digest continues to be the same and without invalidatin...

PT-2021-14542

Name of the Vulnerable Software and Affected Versions SAP HANA Database versions 1.0, 2.0 Description The issue allows an attacker to tamper with SAML tokens that use MD5 digest, potentially impersonating a user in the HANA database and accessing its contents. This is possible because an attacker...

PT-2020-16517

Name of the Vulnerable Software and Affected Versions SAP HANA Database version 2.0 Description The issue arises from incorrect validation of the username during SAML bearer token-based user authentication. It allows manipulation of a valid existing SAML bearer token to authenticate as a user wit...