NVD

Id
32194  
Name
CVE-2014-4160  
Description
Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-06-13  
Modified Date
2014-06-21  
Seq
2014-4160  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
169248 32194 CVE-2014-4160 http://blog.emaze.net/2014/05/sap-multiple-vulnerabilities.html  View
169249 32194 CVE-2014-4160 http://scn.sap.com/docs/DOC-8218  View
169250 32194 CVE-2014-4160 67995  View
169251 32194 CVE-2014-4160 https://service.sap.com/sap/support/notes/1932505  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
14060 JVNDB-2014-002935 SAP NetWeaver Business Client の testcanvas ノードにおけるクロスサイトスクリプティングの脆弱性 SAP NetWeaver Business Client (NWBC) の testcanvas ノードには、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-4160 71448 CVE-2014-4160 32194 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-002935.html 2014-05-28 2014-06-17 View