CVE-2015-7727

2015-10-15T20:59:00
ID CVE-2015-7727
Type cve
Reporter cve@mitre.org
Modified 2015-10-16T15:04:00

Description

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the (1) trace configuration page or (2) getSqlTraceConfiguration function, aka SAP Security Note 2153898.