CVE-2026-44753

3.7 Faible

Publiée le 14/07/2026 à 03:16 · Modifiée le 14/07/2026 à 18:46 · En attente d'analyse NVD · Source : cna@sap.com

Description

SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts, resulting in low impact on confidentiality, with no impact on integrity and availability of the application.

Traduire en français

Produits concernés

SAP_SE SAP HANA Extended Application Services classic model (User Self Service)

Scores CVSS

Version	Score	Source	Vecteur
3.1	3.7 Faible	cna@sap.com	`CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:N/A:N`

Faiblesses (CWE)

CWE-204

Références

https://me.sap.com/notes/3732522
https://url.sap/sapsecuritypatchday

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories