CVE-2015-7729
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer...
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.
Exploit likelihood
What each source reports
NVD Score used
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.
- Record
CVE-2015-7729- CVSS 2.0
- 6.5 Medium
AV:N/AC:L/Au:S/C:P/I:P/A:P - Weakness
- CWE-94
- Updated
- 2026-11-02
CVE List No score
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.
- Record
CVE-2015-7729- Updated
- 2026-11-02
EUVDEUVD-2015-7629 No score
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.
- Record
EUVD-2015-7629- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-vfv7-68jw-2rq6 No score
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer...
Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.
- Record
GHSA-vfv7-68jw-2rq6- Weakness
- CWE-94
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2015-7729 is a medium vulnerability (CVSS 6.5) in Sap Hana, published October 15, 2015. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.48%, the 74th percentile. No source names a fixed version.
References
onapsis.com/research/security-advisories/sap-hana-xsjs-code-injection-test-net
packetstormsecurity.com/files/133763/SAP-HANA-test-net.xsjs-Code-Injection.html
seclists.org/fulldisclosure/2015/Sep/112
nvd.nist.gov/vuln/detail/CVE-2015-7729
github.com/advisories/GHSA-vfv7-68jw-2rq6