CVE-2015-7725

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute…

published October 15, 2015

CVSS
—
EPSS
2%
Percentile
77.3
In the wild
Unconfirmed
What it is

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the (1) remoteSourceName in the dropCredentials function or unspecified vectors in the (2) setTraceLevelsForXsApps, (3) _modifyUser, or (4) _newUser function, aka SAP Security Notes 2153898 and 2153765.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01735 · 77.3th percentile
Published
2015-10-15T20:00Z
EPSS history
Timeline
  • 15 OCT 20:00Z
    Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute…
    cvelistv5