CVE-2015-7727: SAP Hana

Medium severity, CVSS 6.5. EPSS: 1.3% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Web-based Development Workbench in SAP HANA DB 1.00.73.00.389160 (NewDB100_REL) allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors in the (1) trace configuration page or (2) getSqlTraceConfiguration function, aka SAP Security Note 2153898.

Affected products

• SAP Hana: version 1.00.73.00.389160 only

Published 2015-10-15. Last modified 2026-06-17.