NVD

Id
28196  
Name
CVE-2015-7725  
Description
Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the (1) remoteSourceName in the dropCredentials function or unspecified vectors in the (2) setTraceLevelsForXsApps, (3) _modifyUser, or (4) _newUser function, aka SAP Security Notes 2153898 and 2153765.  
Reject
 
CVSS Version
2  
CVSS Score
6.5  
Severity
Medium  
CVSS Base Score
6.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8  
CVSS Vector
(AV:N/AC:L/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-10-15  
Modified Date
2015-10-16  
Seq
2015-7725  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
148246 28196 CVE-2015-7725 http://packetstormsecurity.com/files/133761/SAP-HANA-_modifyUser-SQL-Injection.html  View
148247 28196 CVE-2015-7725 http://packetstormsecurity.com/files/133762/SAP-HANA-_newUser-SQL-Injection.html  View
148248 28196 CVE-2015-7725 http://packetstormsecurity.com/files/133764/SAP-HANA-setTraceLevelsForXsApps-SQL-Injection.html  View
148249 28196 CVE-2015-7725 http://packetstormsecurity.com/files/133769/SAP-HANA-Drop-Credentials-SQL-Injection.html  View
148250 28196 CVE-2015-7725 20150929 [Onapsis Security Advisory 2015-015] SAP HANA SQL injection in _modifyUser function  View
148251 28196 CVE-2015-7725 20150929 [Onapsis Security Advisory 2015-016] SAP HANA SQL injection in _newUser function  View
148252 28196 CVE-2015-7725 20150929 [Onapsis Security Advisory 2015-018] SAP HANA SQL injection in, setTraceLevelsForXsApps function  View
148253 28196 CVE-2015-7725 20150929 [Onapsis Security Advisory 2015-023] SAP HANA Drop Credentials SQL injection  View
148254 28196 CVE-2015-7725 https://www.onapsis.com/blog/analyzing-sap-security-notes-may-2015-edition  View
148255 28196 CVE-2015-7725 https://www.onapsis.com/research/security-advisories/sap-hana-drop-credentials-sql-injection  View
148256 28196 CVE-2015-7725 https://www.onapsis.com/research/security-advisories/sap-hana-sql-injection-modifyuser  View
148257 28196 CVE-2015-7725 https://www.onapsis.com/research/security-advisories/sap-hana-sql-injection-newuser  View
148258 28196 CVE-2015-7725 https://www.onapsis.com/research/security-advisories/sap-sql-injection-settracelevelsforxsapps  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
10003 JVNDB-2015-005323 SAP HANA DB の Web-based Development Workbench における SQL インジェクションの脆弱性 SAP HANA DB の Web-based Development Workbench には、SQL インジェクションの脆弱性が存在します。 CVE-2015-7725 84950 CVE-2015-7725 28196 6.5 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005323.html 2015-05-12 2015-10-19 View