CVE-2015-7727

2015-10-15T16:59:05
ID CVE-2015-7727
Type cve
Reporter NVD
Modified 2015-10-16T11:04:54

Description

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the (1) trace configuration page or (2) getSqlTraceConfiguration function, aka SAP Security Note 2153898.