Security Advisory

CVE-2015-7727

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2015-10-15 20:00:00
Last updated 2024-08-06 07:58:59
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the (1) trace configuration page or (2) getSqlTraceConfiguration function, aka SAP Security Note 2153898.