CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 1CVE-2015-4159
https://notcve.org/view.php?id=CVE-2015-4159
SQL injection vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to execute arbitrary SQL commands via unspecified vectors, aka SAP Security Notes 2153892. Vulnerabilidad de inyección SQL en SAP HANA Web-based Development Workbench permite a atacantes remotos ejecutar comandos SQL arbitrarios a través de vectores no especificados, también conocido como la nota de seguridad de SAP 2153892. • http://seclists.org/fulldisclosure/2015/May/96 http://www.securityfocus.com/bid/74802 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •
CVSS: 4.3EPSS: 0%CPEs: 1EXPL: 0CVE-2014-8667
https://notcve.org/view.php?id=CVE-2014-8667
Cross-site scripting (XSS) vulnerability in SAP HANA Web-based Development Workbench allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Vulnerabilidad de XSS en SAP HANA Web-based Development Workbench permite a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a través de vectores no especificados. • http://blog.onapsis.com/analyzing-sap-security-notes-october-2014-edition http://service.sap.com/sap/support/notes/0002069676 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •