SAP SE SAP HANA Database

• CVE-2026-0492 High 8.8 Privilege escalation vulnerability in SAP HANA database 0.3%
• CVE-2023-40309 Critical 9.8 Missing Authorization check in SAP CommonCryptoLib 0.9%
• CVE-2023-40308 High 7.5 Memory Corruption vulnerability in SAP CommonCryptoLib 0.8%
• CVE-2021-21474 Unrated SAP HANA Database, versions - 1.0, 2.0, accepts SAML tokens with MD5 digest, an attacker who manages to obtain an MD5-digest signed SAML Assertion issued for an SAP HANA instance might be able to tamp 0.7%
• CVE-2020-26834 Medium 4.2 SAP HANA Database, version - 2.0, does not correctly validate the username when performing SAML bearer token-based user authentication. It is possible to manipulate a valid existing SAML bearer token 0.7%