CVE

Id
79349  
CVE No.
CVE-2015-2072  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA Developer Edition 80 (1.00.80.00.391861) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) ide/core/plugins/editor/templates/trace/hanaTraceDetailService.xsjs or (2) xs/ide/editor/templates/trace/hanaTraceDetailService.xsjs, aka SAP Note 2069676.  
Phase
Assigned (20150224)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
721573 79349 CVE-2015-2072 BUGTRAQ:20150225 [Onapsis Security Advisory 2015-001] Multiple Reflected Cross Site Scripting Vulnerabilities in SAP HANA Web-based Development Workbench  View
721574 79349 CVE-2015-2072 URL:http://www.securityfocus.com/archive/1/archive/1/534747/100/0/threaded  View
721575 79349 CVE-2015-2072 FULLDISC:20150225 [Onapsis Security Advisory 2015-001] Multiple Reflected Cross Site Scripting Vulnerabilities in SAP HANA Web-based Development Workbench  View
721576 79349 CVE-2015-2072 URL:http://seclists.org/fulldisclosure/2015/Feb/91  View
721577 79349 CVE-2015-2072 MISC:http://packetstormsecurity.com/files/130519/SAP-HANA-Web-based-Development-Workbench-Cross-Site-Scripting.html  View
721578 79349 CVE-2015-2072 BID:72773  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
7628 JVNDB-2015-002948 HP ThinPro Linux および Smart Zero Core の Easy Setup ウィザードにおけるアクセス制限を回避される脆弱性 HP ThinPro Linux および Smart Zero Core の Easy Setup ウィザードには、アクセス制限を回避され、権限を取得される脆弱性が存在します。 CVE-2015-2124 79349 7.2 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-002948.html  View