CVE-2014-8314: XSS
Multiple cross-site scripting (XSS) vulnerabilities in SAP HANA Developer Edition Revision 70 allow remote attackers to inject arbitrary web script or HTML via unspecified vectors to (1) epm/admin/DataGen.xsjs or (2) epm/services/multiply.xsjs in the democontent.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2014-8314?
CVE-2014-8314 is classified as a medium severity vulnerability due to its potential to facilitate cross-site scripting attacks.
How do I fix CVE-2014-8314?
To remediate CVE-2014-8314, ensure that SAP HANA Developer Edition is updated to a version that includes patches addressing these XSS vulnerabilities.
What types of attacks can CVE-2014-8314 enable?
CVE-2014-8314 can enable remote attackers to inject arbitrary web script or HTML, potentially leading to data theft or session hijacking.
Which components of SAP HANA are affected by CVE-2014-8314?
CVE-2014-8314 specifically affects the epm/admin/DataGen.xsjs and epm/services/multiply.xsjs components in SAP HANA Developer Edition.
Is CVE-2014-8314 still a threat in updated versions of SAP HANA?
CVE-2014-8314 should not be a threat if SAP HANA Developer Edition is kept up to date with the latest security patches.