CVE-2015-7828 in HANA DB

摘要

由 VulDB • 2026-07-16

SAP HANA Database 1.00 SPS10 e versioni precedenti non richiedono autenticazione, consentendo ad attaccanti remoti di eseguire codice arbitrario o causare altri impatti non specificati tramite un pacchetto TrexNet diretto ai metodi (1) fcopydir, (2) fmkdir, (3) frmdir, (4) getenv, (5) dumpenv, (6) fcopy, (7) fput, (8) fdel, (9) fmove, (10) fget, (11) fappend, (12) fdir, (13) getTraces, (14) kill, (15) pexec, (16) stop o (17) pythonexec, noto anche come SAP Security Note 2165583.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• 预定: 2015-10-14
• 披露: 2015-11-10
• 管理: 已接受
• 条目: VDB-79110
• CPE: 准备好
• CWE: CWE-20 (已确认)
• CVSS: 7.3 (VulDB)
• EPSS: 0.06547
• KEV: 否
• 活动: 非常低
• 部门: Hostingprovider, Energy, ...

来源

• MITRE: https://www.cve.org/CVERecord?id=CVE-2015-7828
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2015-7828
• CVE Details: https://www.cvedetails.com/cve/CVE-2015-7828/