CVE-2015-7729: Code Injection
Published Oct 15, 2015
·Updated
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.
Affected Software
1 affected component
SAP HANA=1.00.091.00
Event History
Oct 15, 2015
CVE Published
via MITRE·08:00 PM
Data Sourced
via MITRE·08:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2015-7729?
CVE-2015-7729 is considered a high-severity vulnerability due to the potential for arbitrary code execution by authenticated users.
2
How do I fix CVE-2015-7729?
To fix CVE-2015-7729, it is recommended to apply the patches provided in SAP Security Note 2153892.
3
Who is affected by CVE-2015-7729?
CVE-2015-7729 affects users of SAP HANA Developer Edition DB version 1.00.091.00.
4
What type of vulnerability is CVE-2015-7729?
CVE-2015-7729 is an eval injection vulnerability found in test-net.xsjs of SAP HANA.
5
Can CVE-2015-7729 be exploited remotely?
Yes, CVE-2015-7729 can be exploited remotely by authenticated users to execute arbitrary XSJS code.