CVE-2018-2497

CVE-2018-2497: vulnerability in SAP HANA

Published · Updated

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

3Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackepss 0.9%
The security audit log of SAP HANA, versions 1.0 and 2.0, does not log SELECT events if these events are part of a statement with the syntax CREATE TABLE <table_name> AS SELECT.
Affected products
SAP · SAP HANA
Related CVEs — SAP HANA

In the same product, most dangerous first.