CVE-2014-4160

CVE-2014-4160 concerns multiple cross-site scripting (XSS) flaws in the SAP NetWeaver Business Client (NWBC) testcanvas node. The vulnerabilities enable remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter. The public description confirms XS...

CVE-2014-4160

Multiple cross-site scripting XSS vulnerabilities in the testcanvas node in SAP NetWeaver Business Client NWBC allow remote attackers to inject arbitrary web script or HTML via the 1 title or 2 sap-accessibility parameter...