NVD

Id
35408  
Name
CVE-2014-8313  
Description
Eval injection in ide/core/base/server/net.xsjs in the Developer Workbench in SAP HANA allows remote attackers to execute arbitrary XSJX code via unspecified vectors.  
Reject
 
CVSS Version
2  
CVSS Score
6  
Severity
Medium  
CVSS Base Score
6  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
6.8  
CVSS Vector
(AV:N/AC:M/Au:S/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2014-10-16  
Modified Date
2014-10-23  
Seq
2014-8313  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181521 35408 CVE-2014-8313 http://packetstormsecurity.com/files/128597/SAP-HANA-Web-based-Development-Workbench-Code-Injection.html  View
181522 35408 CVE-2014-8313 http://scn.sap.com/docs/DOC-55451  View
181523 35408 CVE-2014-8313 20141008 [Onapsis Security Advisory 2014-028] SAP HANA Web-based Development Workbench Code Injection  View
181524 35408 CVE-2014-8313 http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-028  View
181525 35408 CVE-2014-8313 20141008 [Onapsis Security Advisory 2014-028] SAP HANA Web-based Development Workbench Code Injection  View
181526 35408 CVE-2014-8313 70293  View
181527 35408 CVE-2014-8313 sap-hana-directives-code-execution(96879)  View
181528 35408 CVE-2014-8313 https://service.sap.com/sap/support/notes/2015446  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16059 JVNDB-2014-004934 SAP HANA の Developer Workbench の ide/core/base/server/net.xsjs における任意の XSJX コードを実行される脆弱性 SAP HANA の Developer Workbench の ide/core/base/server/net.xsjs には、Eval インジェクションにより、任意の XSJX コードを実行される脆弱性が存在します。 CVE-2014-8313 75606 CVE-2014-8313 35408 6 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004934.html 2014-06-10 2014-10-23 View