sap hana

Name: sap hana
Brand: sap

productUS

cpe:2.3:a:sap:hana:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

EPSS ≥ 10%

by severity

5critical13high16medium3low

updated 2026-10-28

vulnerabilities (37)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2015-7986US	high7.5	6.24% (94th)	Exploit	no fix	2015-10-27	≤ 1.00.095
CVE-2015-7828US	high10.0	6.55% (94th)	—	no fix	2015-11-10	≤ 1.00
CVE-2016-1928US	critical9.8	6.25% (94th)	—	no fix	2016-01-20	—
CVE-2016-6148US	high7.5	4.33% (91st)	—	no fix	2016-08-05	= 1.00.73.00.389160
CVE-2016-6144US	high8.1	3.84% (90th)	—	no fix	2016-08-05	≤ 1.00.73.00.389160
CVE-2015-7993US	high7.5	3.72% (90th)	—	no fix	2015-11-10	= 1.00.73.00.389160
CVE-2016-6143US	critical9.8	3.65% (90th)	—	no fix	2017-04-13	= 1.00.73.00.389160
CVE-2015-7994US	high7.5	3.43% (89th)	—	no fix	2015-11-10	= 1.00.73.00.389160
CVE-2016-6142US	high7.5	2.89% (87th)	—	no fix	2016-09-26	= 1.00.73.00.389160
CVE-2016-6150US	critical9.8	2.88% (87th)	—	no fix	2016-08-05	—
CVE-2018-2465US	high7.5	2.56% (85th)	—	no fix	2018-09-11	2 versions
CVE-2014-5172US	medium4.3	2.51% (85th)	—	no fix	2014-07-31	—
CVE-2016-1929US	critical9.3	2.26% (83rd)	—	no fix	2016-01-20	—
CVE-2014-8314US	medium4.3	2.23% (83rd)	—	no fix	2014-10-16	—
CVE-2014-8313US	medium6.0	2.08% (81st)	—	no fix	2014-10-16	—
CVE-2015-2072US	medium4.3	1.89% (80th)	—	no fix	2015-02-27	2 versions
CVE-2015-7991US	medium5.0	1.81% (79th)	—	no fix	2015-11-10	= 1.00.73.00.389160
CVE-2015-7725US	medium6.5	1.74% (78th)	—	no fix	2015-10-15	= 1.00.091.00
CVE-2018-2362US	medium5.3	1.58% (75th)	—	no fix	2018-01-09	2 versions
CVE-2015-7992US	medium4.0	1.58% (75th)	—	no fix	2015-11-10	= 1.00.73.00.389160
CVE-2014-2749US	medium5.0	1.51% (74th)	—	no fix	2014-04-10	—
CVE-2018-2402US	high8.4	1.49% (74th)	—	no fix	2018-03-14	2 versions
CVE-2018-2369US	medium5.3	1.49% (74th)	—	no fix	2018-02-14	2 versions
CVE-2015-7729US	medium6.5	1.48% (74th)	—	no fix	2015-10-15	= 1.00.091.00
CVE-2015-7727US	medium6.5	1.33% (71st)	—	no fix	2015-10-15	= 1.00.73.00.389160
CVE-2014-8587US	high7.5	1.29% (70th)	—	no fix	2014-11-04	—
CVE-2016-4017US	high7.5	1.26% (69th)	—	no fix	2016-04-14	—
CVE-2021-21484US	critical9.8OT elevated	1.25% (69th)	—	no fix	2021-03-09	= 2.0
CVE-2015-3995US	medium4.0	1.24% (69th)	—	no fix	2015-05-29	= 1.00.73.00.389160
CVE-2015-3994US	medium4.0	1.17% (67th)	—	no fix	2015-05-29	= 1.00.73.00.389160
CVE-2015-7726US	low3.5	0.96% (61st)	—	no fix	2015-10-15	= 1.00.091.00
CVE-2016-4018US	high7.3	0.96% (61st)	—	no fix	2016-04-14	—
CVE-2015-7728US	low3.5	0.95% (61st)	—	no fix	2015-10-15	= 1.00.73.00.389160
CVE-2018-2497US	low2.7	0.93% (60th)	—	no fix	2018-12-11	2 versions
CVE-2015-6507US	high7.2	0.47% (41st)	—	no fix	2015-10-15	= 1.00.091.00
CVE-2019-0357US	medium6.7	0.39% (33rd)	—	no fix	2019-09-10	2 versions
CVE-2019-0284US	medium6.0	0.35% (29th)	—	no fix	2019-04-10	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-20Improper Input Validation9 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor6 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')5 CVEs
CWE-119Improper Restriction of Operations within the Bounds of a Memory Buffer4 CVEs
CWE-284Improper Access Control4 CVEs
CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')2 CVEs
CWE-94Improper Control of Generation of Code ('Code Injection')2 CVEs
CWE-117Improper Output Neutralization for Logs1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE37 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan