SAP Hana, SAP's in-memory database that it is encouraging customers to adopt, is vulnerable to SQL injection attacks and contains encryption weaknesses, according to security company ERPScan.