5
CVE-2026-34262
- EPSS 0.3%
- Veröffentlicht 14.04.2026 00:09:03
- Zuletzt bearbeitet 04.05.2026 14:32:46
- Quelle cna@sap.com
- CVE-Watchlists
- Unerledigt
LoginInformation Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer
Information Disclosure Vulnerability in SAP HANA Cockpit and HANA Database Explorer
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
SAP ≫ Hana Cockpit Version < 2.18.2
SAP ≫ Hana Database Explorer Version-
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 0.3% | 0.218 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 4.3 | 2.8 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
|
| cna@sap.com | 5 | 3.1 | 1.4 |
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N
|
CWE-522 Insufficiently Protected Credentials
The product transmits or stores authentication credentials, but it uses an insecure method that is susceptible to unauthorized interception and/or retrieval.
https://url.sap/sapsecuritypatchday
https://me.sap.com/notes/3730639
http://seclists.org/fulldisclosure/2026/Apr/16