NVD

Id
35409  
Name
CVE-2014-8314  
Description
Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) epm/admin/DataGen.xsjs or (2) epm/services/multiply.xsjs in the democontent.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:P/A:N)  
Pub Date
2017-01-19  
Published
2014-10-16  
Modified Date
2015-03-10  
Seq
2014-8314  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
181529 35409 CVE-2014-8314 http://packetstormsecurity.com/files/128598/SAP-HANA-Reflective-Cross-Site-Scripting.html  View
181530 35409 CVE-2014-8314 http://scn.sap.com/docs/DOC-55451  View
181531 35409 CVE-2014-8314 20141008 [Onapsis Security Advisory 2014-027] SAP HANA Multiple Reflected Cross Site Scripting Vulnerabilities  View
181532 35409 CVE-2014-8314 http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-027  View
181533 35409 CVE-2014-8314 20141008 [Onapsis Security Advisory 2014-027] SAP HANA Multiple Reflected Cross Site Scripting Vulnerabilities  View
181534 35409 CVE-2014-8314 70307  View
181535 35409 CVE-2014-8314 sap-hana--multiple-xss(96878)  View
181536 35409 CVE-2014-8314 https://service.sap.com/sap/support/notes/2009696  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
16060 JVNDB-2014-004935 SAP HANA Developer Edition におけるクロスサイトスクリプティングの脆弱性 SAP HANA Developer Edition には、クロスサイトスクリプティングの脆弱性が存在します。 CVE-2014-8314 75607 CVE-2014-8314 35409 4.3 http://jvndb.jvn.jp/ja/contents/2014/JVNDB-2014-004935.html 2014-05-13 2014-10-23 View