CVE-2014-3134: XSS

Published Apr 30, 2014

Updated

Cross-site scripting (XSS) vulnerability in the InfoView application in SAP BusinessObjects allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Affected Software

1 affected component

SAP BusinessObjects

Event History

Apr 30, 2014

CVE Published

via MITRE·02:00 PM

Data Sourced

via MITRE·02:00 PM

Description

Data Sourced

via NVD·02:22 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2014-3134?

CVE-2014-3134 is considered a medium severity vulnerability due to its cross-site scripting (XSS) nature.

How do I fix CVE-2014-3134?

To fix CVE-2014-3134, update your SAP BusinessObjects application to the latest patched version provided by SAP.

What types of attacks can exploit CVE-2014-3134?

CVE-2014-3134 can be exploited by attackers to inject arbitrary web script or HTML into InfoView applications.

Which software versions are affected by CVE-2014-3134?

CVE-2014-3134 affects unspecified versions of SAP BusinessObjects that utilize the InfoView application.

What are the potential impacts of CVE-2014-3134 exploitation?

Exploitation of CVE-2014-3134 can lead to unauthorized actions on behalf of users, stealing cookies, or redirecting users to malicious websites.