What’s Vulnerable › Vulnerabilities

CVE-2019-0261

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.6% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-02-15 · updated 2026-06-17
• Weakness: CWE-306

Description

Under certain circumstances, SAP HANA Extended Application Services, advanced model (XS advanced) does not perform authentication checks properly for XS advanced platform and business users. Fixed in 1.0.97 to 1.0.99 (running on SAP HANA 1 or SAP HANA 2 SPS0 (second S stands for stack)).

Affected products

• SAP SE SAP Landscape Management: 3.0

References

• http://www.securityfocus.com/bid/106986
• https://launchpad.support.sap.com/#/notes/2742027
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943
• http://www.securityfocus.com/bid/106986
• https://launchpad.support.sap.com/#/notes/2742027
• https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=510922943

Get alerted when CVE-2019-0261 or the next vulnerability affects your stack