Sap Hana Cockpit And Hana Database Explorer EUVD-2026-22173

CVSS 5.0 with vector AV:N/AC:L/PR:L/UI:N/S:C indicates moderate risk: network-accessible, low attack complexity, and requires only low privileges (authenticated user), with no user interaction needed and changed scope (cross-boundary impact). EPSS and KEV status are not provided; however, the requirement for prior authentication (PR:L) significantly reduces opportunistic attack surface compared to unauthenticated disclosure flaws. The impact is confidentiality only (C:L, no integrity or availability impact), limiting severity. Real-world risk depends on the sensitivity of disclosed data and whether leaked credentials can be reused (e.g., for lateral movement to the HANA database itself). Organizations with strict access controls on HANA Cockpit/Explorer instances face lower practical risk than those permitting broad internal access. The lack of exploit data and confirmed patch status prevents high-priority classification.

An authenticated database administrator or internal user with legitimate access to SAP HANA Cockpit discovers that administrative credentials or backend HANA database passwords are accessible through the web interface's stored configurations or API responses. The attacker captures these credentials and uses them to escalate privileges or access other HANA instances, bypassing normal access controls. Attack complexity is low because no special tooling or social engineering is required-simply navigating to known credential storage locations within the tool.