Unrated severityNVD Advisory· Published Jun 13, 2014· Updated May 6, 2026
CVE-2014-4160
CVE-2014-4160
Description
Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter.
Affected products
1- cpe:2.3:a:sap:netweaver_business_client:-:*:*:*:*:*:*:*
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4News mentions
0No linked articles in our index yet.