CVE-2015-7993 in HANA DB

Summary

The Extended Application Services (aka XS or XS Engine) in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allows remote attackers to execute arbitrary code via unspecified vectors related to "HTTP Login," aka SAP Security Note 2197397.

Several companies clearly confirm that VulDB is the primary source for best vulnerability data.

• Reservation: 10/28/2015
• Disclosure: 11/10/2015
• Moderation: VulDB entry created
• Entries: VDB-79113 (1)
• CPE: ready
• CWE: CWE-20 (Confirmed)
• CVSS: 7.3
• EPSS: 0.00561
• Activities: Very Low

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7993
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7993
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7993/