Unrated severityNVD Advisory· Published Jun 13, 2014· Updated Jun 17, 2026
CVE-2014-4160
CVE-2014-4160
Description
Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter.
Affected products
2cpe:2.3:a:sap:netweaver_business_client:-:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sap:netweaver_business_client:-:*:*:*:*:*:*:*
- (no CPE)
Patches
Vulnerability mechanics
References
4News mentions
0No linked articles in our index yet.