SAP Knowledge Base Article - Preview

3805264 - Vulnerability ID CVE-2026-49844 - in relation to SAP HANA Smart Data Integration

Symptom

  • A vulnerability scan report flags CVE-2026-49844 on the Data Provisioning Agent host machine.
  • The scan identifies org.apache.logging.log4j*_<version>.jar as vulnerable in the DP Agent installation directory.


Read more...

Environment

  • SAP HANA smart data integration
  • Data Provisioning Agent 2.8.4.x and earlier versions shipping Apache Log4j in the affected range (2.13.1 through 2.25.4, or 2.26.0)

Product

SAP HANA smart data integration 2.0

Keywords

KBA , HAN-DP-SDI , SAP HANA smart data integration (SDI) , HAN-DP-SDI-DS , SAP Datasphere specific SDI issues , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.