CVE-2015-7725

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00...

6.5 Medium

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.091.00.1418659308 allow remote authenticated users to execute arbitrary SQL commands via the (1) remoteSourceName in the dropCredentials function or unspecified vectors in the (2) setTraceLevelsForXsApps, (3) _modifyUser, or (4) _newUser function, aka SAP Security Notes 2153898 and 2153765.

Exploit likelihood

1.74%Down 0.5 points since Feb 4, 2022

What each source reports

NVD Score used 6.5

Record: CVE-2015-7725
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-89
Updated: 2026-11-02

CVE List No score

Record: CVE-2015-7725
Updated: 2026-11-02

EUVDEUVD-2015-7625 No score

Record: EUVD-2015-7625
Updated: 2026-11-03

GitHub AdvisoriesGHSA-6c5j-p42v-pmq9 No score

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00...

Record: GHSA-6c5j-p42v-pmq9
Weakness: CWE-89
Updated: 2026-11-02

Affected products

sap hana

History

History
Recorded	Changed	Sources
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2015-7725 is a medium vulnerability (CVSS 6.5) in Sap Hana, published October 15, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.74%, the 77th percentile. No source names a fixed version.

References

Show 9 moreShow less