Unrated severityNVD Advisory· Published Feb 14, 2014· Updated Jun 17, 2026

CVE-2014-1960

Description

The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.

Affected products

SAP/Netweaver
cpe:2.3:a:sap:netweaver:-:*:*:*:*:*:*:*
SAP/Solution Manager3 versions
cpe:2.3:a:sap:netweaver_solution_manager:7.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:sap:netweaver_solution_manager:7.0:*:*:*:*:*:*:*
- cpe:2.3:a:sap:netweaver_solution_manager:7.1:*:*:*:*:*:*:*
- (no CPE)

Patches

Vulnerability mechanics

References

secunia.com/advisories/56942nvdVendor Advisory
scn.sap.com/docs/DOC-8218nvd
erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure/nvd
exchange.xforce.ibmcloud.com/vulnerabilities/91093nvd
service.sap.com/sap/support/notes/1828885nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000