CVE-2014-4160
SAP NetWeaver Business Client - XSS
Title source: llmDescription
Multiple cross-site scripting (XSS) vulnerabilities in the testcanvas node in SAP NetWeaver Business Client (NWBC) allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) sap-accessibility parameter.
Scores
EPSS
0.0036
EPSS Percentile
57.8%
Details
CWE
CWE-79
Status
published
Products (2)
sap/netweaver_business_client
n/a/n/a
Published
Jun 13, 2014
Tracked Since
Feb 18, 2026