CVE-2015-7729: SAP Hana

Medium severity, CVSS 6.5. EPSS: 1.5% chance of exploitation in the next 30 days.

Eval injection in test-net.xsjs in the Web-based Development Workbench in SAP HANA Developer Edition DB 1.00.091.00.1418659308 allows remote authenticated users to execute arbitrary XSJS code via unspecified vectors, aka SAP Security Note 2153892.

Affected products

  • SAP Hana: version 1.00.091.00 only

Published 2015-10-15. Last modified 2026-06-17.