A flaw in SAP HANA Cockpit and the HANA Database Explorer allows an attacker to obtain sensitive information that should be restricted. The weakness is classified as CWE‑522, indicating that confidential data can be accessed without proper authorization. Potentially exposed information could include configuration settings, access credentials, or other privileged details that compromise confidentiality of the system.

The affected products are SAP HANA Cockpit and the HANA Database Explorer, both part of SAP’s HANA platform. The advisory does not list specific version numbers, implying that any deployment of these services could be vulnerable unless confirmed patched.

The CVSS base score of 5.0 reflects moderate severity. Because exploitation data is not available, and the vulnerability is not listed in known exploited vulnerability catalogs, widespread attacks have not been reported. The likely attack path is remote access via the web interfaces of the cockpit and explorer, though the precise conditions required to exploit the issue are not detailed in the advisory and are inferred rather than explicitly confirmed.