VULNERABILITY INTELLIGENCE

CVE-2019-0261

CVSS score9.8 CRITICAL
EPSS probability3.63%
CISA KEVNot currently listed
Published2019-02-15
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HANA 2 SPS0 (second S stands for stack)).

Weakness classification

  • nvd@nist.gov: CWE-306

Primary references