sap hana-extend-application-services CVE-2018-2379 vulnerability in SAP Products
Published on February 14, 2018

In SAP HANA Extended Application Services, 1.0, an unauthenticated user could test if a given username is valid by evaluating error messages of a specific endpoint.

NVD

Vulnerability Analysis

Exploitation:
NONE
Automatable:
NO
Technical Impact:
PARTIAL

Products Associated with CVE-2018-2379

stack.watch emails you whenever new vulnerabilities are published in SAP Hana Extend Application Services or SAP Hana Extended Application Services. Just hit a watch button to start following.

SAP Hana Extend Application Services
SAP Hana Extended Application Services

Affected Versions

SAP SE SAP HANA Extended Application Services Version 1.0 is affected by CVE-2018-2379

Exploit Probability

EPSS
0.89%
Percentile
59.47%

EPSS (Exploit Prediction Scoring System) scores estimate the probability that a vulnerability will be exploited in the wild within the next 30 days. The percentile shows you how this score compares to all other vulnerabilities.