sap hana-extend-application-services CVE-2018-2373 vulnerability in SAP Products
Published on February 14, 2018

Under certain circumstances, a specific endpoint of the Controller's API could be misused by unauthenticated users to execute SQL statements that deliver information about system configuration in SAP HANA Extended Application Services, 1.0.

NVD


Products Associated with CVE-2018-2373

stack.watch emails you whenever new vulnerabilities are published in SAP Hana Extend Application Services or SAP Hana Extended Application Services. Just hit a watch button to start following.

SAP Hana Extend Application Services
SAP Hana Extended Application Services

Affected Versions

SAP SE SAP HANA Extended Application Services Version 1.0 is affected by CVE-2018-2373

Exploit Probability

EPSS
1.15%
Percentile
66.99%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.