CVE-2026-44753: Observable Response Discrepancy

SAP HANA Database user self service tools allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts,...

CVE-2017-16687: Exposure of Sensitive Information to an Unauthorized Actor

The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username ...

PT-2017-14524

Name of the Vulnerable Software and Affected Versions SAP HANA Database versions 1.00 and 2.00 Description The user self-service tools of SAP HANA extended application services, classic user self-service, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could u...