CVE-2017-16687

MEDIUM 5.3CVE-2017-16687 · Published 12/12/2017 · updated 17/06/2026

In short

CVE-2017-16687 is a MEDIUM (CVSS 5.3) vulnerability affecting hana database (sap).
Chance of exploitation in the next 30 days (EPSS): 1.3%, higher than 70.5% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
hana database sap	`= 1.00= 2.00`	No fix yet

Description

The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username is valid.

References

securityfocus.com/bid/102152 · Third Party Advisory
blogs.sap.com/2017/12/12/sap-security-patch-day-december-2017 · Vendor Advisory
launchpad.support.sap.com · Permissions Required

More vulnerabilities in hana database

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

hana database

sap

= 1.00= 2.00

No fix yet

Description

More vulnerabilities in hana database

See all →