CVE-2026-0514: Cross-Site Scripting (XSS) vulnerability in SAP Business Connector
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Business Connector, an unauthenticated attacker could craft a malicious link. When an unsuspecting user clicks this link, the user may be redirected to a site controlled by the attacker. Successful exploitation could allow the attacker to access or modify information related to the webclient, impacting confidentiality and integrity, with no effect on availability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2026-0514?
The severity of CVE-2026-0514 is classified as medium, as it allows for Cross-Site Scripting (XSS) attacks that could expose sensitive information.
How do I fix CVE-2026-0514?
To fix CVE-2026-0514, it is recommended to apply the latest security patches provided by SAP for Business Connector.
Who is vulnerable to CVE-2026-0514?
All users of SAP Business Connector are vulnerable to CVE-2026-0514 if they have not yet applied the necessary security updates.
What type of attack does CVE-2026-0514 enable?
CVE-2026-0514 enables Cross-Site Scripting (XSS) attacks, where attackers can inject malicious scripts into web pages viewed by other unsuspecting users.
Can CVE-2026-0514 be exploited without authentication?
Yes, CVE-2026-0514 can be exploited by unauthenticated attackers who craft malicious links that unsuspecting users may click.