NVD

Id
24241  
Name
CVE-2015-2072  
Description
Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA Developer Edition 80 (1.00.80.00.391861) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) ide/core/plugins/editor/templates/trace/hanaTraceDetailService.xsjs or (2) xs/ide/editor/templates/trace/hanaTraceDetailService.xsjs, aka SAP Note 2069676.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2015-02-27  
Modified Date
2015-03-02  
Seq
2015-2072  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
128381 24241 CVE-2015-2072 http://packetstormsecurity.com/files/130519/SAP-HANA-Web-based-Development-Workbench-Cross-Site-Scripting.html  View
128382 24241 CVE-2015-2072 20150225 [Onapsis Security Advisory 2015-001] Multiple Reflected Cross Site Scripting Vulnerabilities in SAP HANA Web-based Development Workbench  View
128383 24241 CVE-2015-2072 20150225 [Onapsis Security Advisory 2015-001] Multiple Reflected Cross Site Scripting Vulnerabilities in SAP HANA Web-based Development Workbench  View
128384 24241 CVE-2015-2072 72773  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
6325 JVNDB-2015-001645 SAP HANA および HANA Developer Edition におけるクロスサイトスクリプティングの脆弱性 SAP HANA および HANA Developer Edition には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2015-2072 79297 CVE-2015-2072 24241 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-001645.html 2015-02-25 2015-03-03 View