CVE-2021-21484

—

CVSS 3.1

9.8 critical

EPSS

1%p67

Published

Mar 9, 2021 (Mar 9, 2021)

Modified

Jun 17, 2026

Description

LDAP authentication in SAP HANA Database version 2.0 can be bypassed if the attached LDAP directory server is configured to enable unauthenticated bind.

Vendors: sap
Products: hana
Weakness: CWE-863
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.