CVE

Id
72469  
CVE No.
CVE-2014-5172  
Status
Candidate  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the XS Administration Tools in SAP HANA allow remote attackers to inject arbitrary web script or HTML via unspecified vectors.  
Phase
Assigned (20140731)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
684526 72469 CVE-2014-5172 BUGTRAQ:20140729 [Onapsis Security Advisory 2014-025] Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool  View
684527 72469 CVE-2014-5172 URL:http://www.securityfocus.com/archive/1/archive/1/532941/100/0/threaded  View
684528 72469 CVE-2014-5172 FULLDISC:20140729 [Onapsis Security Advisory 2014-025] Multiple Cross Site Scripting Vulnerabilities in SAP HANA XS Administration Tool  View
684529 72469 CVE-2014-5172 URL:http://seclists.org/fulldisclosure/2014/Jul/153  View
684530 72469 CVE-2014-5172 MISC:http://packetstormsecurity.com/files/127670/SAP-HANA-XS-Administration-Tool-Cross-Site-Scripting.html  View
684531 72469 CVE-2014-5172 MISC:http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-025  View
684532 72469 CVE-2014-5172 CONFIRM:http://scn.sap.com/docs/DOC-8218  View
684533 72469 CVE-2014-5172 CONFIRM:https://service.sap.com/sap/support/notes/1993349  View
684534 72469 CVE-2014-5172 BID:68952  View
684535 72469 CVE-2014-5172 URL:http://www.securityfocus.com/bid/68952  View
684536 72469 CVE-2014-5172 SECUNIA:59634  View
684537 72469 CVE-2014-5172 URL:http://secunia.com/advisories/59634  View
684538 72469 CVE-2014-5172 XF:sap-hanaxs-xss(94922)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
14818 JVNDB-2014-003693 WordPress 用 HDW Player プラグインのビデオページにおける SQL インジェクションの脆弱性 WordPress 用 HDW Player (hdw-player-video-player-video-gallery) プラグインのビデオページには、SQL インジェクションの脆弱性が存在します。 CVE-2014-5180 72469 6.5 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-003693.html  View