CVE-2019-0306

MEDIUM

SAP HANA Extended Application Services - Authenticated Information Disclosure

Title source: llm
STIX 2.1

Description

SAP HANA Extended Application Services (advanced model), version 1, allows authenticated low privileged XS Advanced Platform users such as SpaceAuditors to execute requests to obtain a complete list of SAP HANA user IDs and names.

References (2)

Core 2
Core References
Permissions Required, Vendor Advisory x_refsource_misc
https://launchpad.support.sap.com/#/notes/2771128

Scores

CVSS v3 4.3
EPSS 0.0020
EPSS Percentile 41.5%
Attack Vector NETWORK
CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Details

Status published
Products (1)
sap/hana_extended_application_services 1.0
Published Jun 12, 2019
Tracked Since Feb 18, 2026