QwikSec

Security Database

CVE

CWE

Training

CVE-2015-7726

Published: Oct 15, 2015

Modified: Aug 6, 2024

PUBLISHED

Description

Cross-site scripting (XSS) vulnerability in role deletion in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allows remote authenticated users to inject arbitrary web script or HTML via the role name, aka SAP Security Note 2153898.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

https://www.onapsis.com/research/security-advisories/sap-hana-xss-role-deletion-through-web-based-workbench

x_refsource_MISC

20150929 [Onapsis Security Advisory 2015-019] SAP HANA XSS in role deletion through Web-based development workbench

mailing-list

x_refsource_FULLDISC

https://www.onapsis.com/blog/analyzing-sap-security-notes-may-2015-edition

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.