| Package | Affected versions | Patched versions |
|---|---|---|
| hana database | = 1.00= 2.00 |
The user self-service tools of SAP HANA extended application services, classic user self-service, a part of SAP HANA Database versions 1.00 and 2.00, can be misused to enumerate valid and invalid user accounts. An unauthenticated user could use the error messages to determine if a given username is valid.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free