Unrated severityNVD Advisory· Published Oct 16, 2014· Updated Jun 17, 2026

CVE-2014-8314

Description

Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) epm/admin/DataGen.xsjs or (2) epm/services/multiply.xsjs in the democontent.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

SAP/Hana2 versions
cpe:2.3:a:sap:hana:*:*:*:*:developer:*:*:*+ 1 more
- cpe:2.3:a:sap:hana:*:*:*:*:developer:*:*:*
- (no CPE)range: = Revision 70

Patches

Vulnerability mechanics

References

scn.sap.com/docs/DOC-55451nvdVendor Advisory
packetstormsecurity.com/files/128598/SAP-HANA-Reflective-Cross-Site-Scripting.htmlnvd
seclists.org/fulldisclosure/2014/Oct/37nvd
www.onapsis.com/resources/get.phpnvd
www.securityfocus.com/archive/1/533644/100/0/threadednvd
www.securityfocus.com/bid/70307nvd
exchange.xforce.ibmcloud.com/vulnerabilities/96878nvd
service.sap.com/sap/support/notes/2009696nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000