CVE-2026-44753
Low
Description
SAP HANA Database (user self service tools) allows an unauthenticated user to send specially crafted requests that produce distinguishable responses, enabling enumeration of valid user accounts and email addresses. Successful exploitation could allow the attacker to enumerate valid user accounts, resulting in low impact on confidentiality, with no impact on integrity and availability of the application.
SeverityLow
CVSS3.7
Exploit probability—
ProductSAP HANA Extended Application Services classic model (User Self Service)
PublishedJul 14, 2026
First seenJul 14, 2026
Weakness typeCWE-204CWE-204
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| SAP_SE SAP HANA Extended Application Services classic model (User Self Service) | HDB 2.00 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.