CVE-2015-7725: SQL Injection
Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the (1) remoteSourceName in the dropCredentials function or unspecified vectors in the (2) setTraceLevelsForXsApps, (3) modifyUser, or (4) newUser function, aka SAP Security Notes 2153898 and 2153765.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2015-7725?
CVE-2015-7725 is classified as a high severity SQL injection vulnerability.
How do I fix CVE-2015-7725?
To fix CVE-2015-7725, update your SAP HANA DB to the latest version that patches this vulnerability.
Who is affected by CVE-2015-7725?
CVE-2015-7725 affects remote authenticated users of SAP HANA DB version 1.00.091.00.
What are the consequences of CVE-2015-7725?
The consequences of CVE-2015-7725 can include unauthorized execution of arbitrary SQL commands.
Is CVE-2015-7725 easy to exploit?
CVE-2015-7725 can be exploited relatively easily by authenticated users due to improper input validation.