Lucene search
HistoryJan 07, 2015 - 7:59 p.m.
CVE-2014-9569
sap
netweaver
business client
html
xss
vulnerability
remote attacks
web script
security
nvd
cve-2014-9569
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
65.0%
Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) roundtrips parameter, aka SAP Security Note 2051285.
Affected configurations
Node
sapnetweaver_business_client_for_htmlMatch3.0
| CPE | Name | Operator | Version |
|---|---|---|---|
| sap:netweaver_business_client_for_html | sap netweaver business client for html | eq | 3.0 |
Related
prion
prion
Cross site scripting
2015-01-07 19:59:00
cvelist
cvelist
CVE-2014-9569
2015-01-07 19:00:00
nvd
nvd
CVE-2014-9569
2015-01-07 19:59:03
5.9 Medium
AI Score
Confidence
High
4.3 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:N/I:P/A:N
0.002 Low
EPSS
Percentile
65.0%
Related for CVE-2014-9569