CVE-2015-2072: XSS

Published Feb 27, 2015

Updated

Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA 73 (1.00.73.00.389160) and HANA Developer Edition 80 (1.00.80.00.391861) allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) ide/core/plugins/editor/templates/trace/hanaTraceDetailService.xsjs or (2) xs/ide/editor/templates/trace/hanaTraceDetailService.xsjs, aka SAP Note 2069676.

Affected Software

2 affected components

SAP HANA=1.00.73.00.389160

SAP HANA=1.00.80.00.391861

Event History

Feb 27, 2015

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

Description

Frequently Asked Questions

What is the severity of CVE-2015-2072?

CVE-2015-2072 is classified as a moderate severity vulnerability due to its potential impact on web application security.

How do I fix CVE-2015-2072?

To fix CVE-2015-2072, update SAP HANA to version 1.00.80.00.391861 or later to mitigate the cross-site scripting vulnerabilities.

What are the impacted versions for CVE-2015-2072?

CVE-2015-2072 affects SAP HANA versions 1.00.73.00.389160 and 1.00.80.00.391861.

What type of vulnerability is CVE-2015-2072?

CVE-2015-2072 is a cross-site scripting (XSS) vulnerability that allows attackers to inject malicious web scripts into affected applications.

Who can be affected by CVE-2015-2072?

Remote attackers can exploit CVE-2015-2072 to inject arbitrary web scripts into applications using vulnerable versions of SAP HANA.