CVE-2015-7729

published 2015-10-15

CVE-2015-7729: Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated…

medium 6.5 CVSS 3.1

AV N AC L Au S C P I P A P

Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
sap	hana	—	—

CWE-94