CVE-2014-9569: XSS
First published: Wed Jan 07 2015(Updated: )
Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) roundtrips parameter, aka SAP Security Note 2051285.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| SAP NetWeaver Business Client for HTML | =3.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2014-9569?
CVE-2014-9569 has been classified with a moderate severity level due to its potential for cross-site scripting attacks.
How do I fix CVE-2014-9569?
To mitigate CVE-2014-9569, ensure your SAP NetWeaver Business Client for HTML is updated to a patched version provided by SAP.
What software is affected by CVE-2014-9569?
CVE-2014-9569 affects SAP NetWeaver Business Client for HTML version 3.0.
What vulnerabilities are introduced by CVE-2014-9569?
CVE-2014-9569 introduces multiple cross-site scripting (XSS) vulnerabilities that allow injection of arbitrary web scripts or HTML.
Who can exploit CVE-2014-9569?
Remote attackers can exploit CVE-2014-9569 to inject malicious scripts through the title or roundtrips parameters.
- agent/type
- agent/first-publish-date
- agent/last-modified-date
- agent/weakness
- agent/references
- agent/severity
- agent/softwarecombine
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- agent/author
- vendor/sap
- canonical/sap netweaver business client for html
- version/sap netweaver business client for html/3.0