CVE-2018-2374

CVE-2018-2374: vulnerability in SAP HANA Extended Application Services

Published · Updated

Follow this CVE+ Monitor SAP HANA Extended Application Services

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 1.2%
In SAP HANA Extended Application Services, 1.0, a controller user who has SpaceAuditor authorization in a specific space could retrieve sensitive application data like service bindings within that space.
Affected products
SAP SE · SAP HANA Extended Application Services
Related CVEs — SAP HANA Extended Application Services

In the same product, most dangerous first.

CVE-2019-0261—CVE-2019-0261EPSS 3.6%CVE-2019-0277—CVE-2019-0277EPSS 2.1%CVE-2018-2373—CVE-2018-2373EPSS 1.1%CVE-2018-2376—CVE-2018-2376EPSS 0.9%CVE-2018-2375—CVE-2018-2375EPSS 0.9%CVE-2019-0363—CVE-2019-0363EPSS 0.9%