CVE-2015-1311

CriticalCVSS 10.0/10Last modified Jun 17, 2026

Description

The Extended Application Services (XS) in SAP HANA allows remote attackers to inject arbitrary ABAP code via unspecified vectors, aka SAP Note 2098906. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.

Metrics

CVSS 2.0 10.0/10AV:N/AC:L/Au:N/C:C/I:C/A:C

Weakness enumeration

CWE-94

Affected software

No affected versions have been published.

Timeline

Published
Jan 22, 2015
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2015

CVE-2015-13127.5The Dealer Portal in SAP ERP does not properly restrict access, which allows remote attackers to obtain sensitive information, gain privilegCVE-2015-13136.5JetBrains TeamCity 8 and 9 before 9.0.2 allows bypass of account-creation restrictions via a crafted request because the required request daCVE-2015-13142.1The USAA Mobile Banking application before 7.10.1 for Android displays the most recently-used screen before prompting the user for login, whCVE-2015-13157.5Buffer overflow in the charset_to_intern function in unix/unix.c in Info-Zip UnZip 6.10b allows remote attackers to execute arbitrary code vCVE-2015-13167.5Juju Core's Joyent provider before version 1.25.5 uploads the user's private ssh key.CVE-2015-13177.5Use-after-free vulnerability in Oxide before 1.5.6 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (crash) or poCVE-2015-13187.2The crash reporting feature in Apport 2.13 through 2.17.x before 2.17.1 allows local users to gain privileges via a crafted usr/share/apportCVE-2015-13192.1The Unity Settings Daemon before 14.04.0+14.04.20150825-0ubuntu2 and 15.04.x before 15.04.1+15.04.20150408-0ubuntu1.2 does not properly deteCVE-2015-13209.8The SeaMicro provisioning of Ubuntu MAAS logs credentials, including username and password, for the management interface. This issue affectsCVE-2015-13216.8Use-after-free vulnerability in the file picker implementation in Oxide before 1.6.5 allows remote attackers to cause a denial of service (cCVE-2015-13224.6Directory traversal vulnerability in the Ubuntu network-manager package for Ubuntu (vivid) before 0.9.10.0-4ubuntu15.1, Ubuntu 14.10 before CVE-2015-13235.5The simulate dbus method in aptdaemon before 1.1.1+bzr982-0ubuntu3.1 as packaged in Ubuntu 15.04, before 1.1.1+bzr980-0ubuntu1.1 as packaged
CVE-2015-1311: Critical severity, CVSS 10.0 | Vulnix