CVE-2014-9569

{"id": "CVE-2014-9569", "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 4.3, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:N/I:P/A:N", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "NONE", "confidentialityImpact": "NONE"}, "acInsufInfo": false, "impactScore": 2.9, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}]}, "published": "2015-01-07T19:59:03.933", "references": [{"url": "http://secunia.com/advisories/62017", "source": "cve@mitre.org"}, {"url": "http://www.securitytracker.com/id/1031509", "source": "cve@mitre.org"}, {"url": "http://www.senseofsecurity.com.au/advisories/SOS-14-005", "tags": ["Exploit", "URL Repurposed"], "source": "cve@mitre.org"}], "vulnStatus": "Modified", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-79"}]}], "descriptions": [{"lang": "en", "value": "Multiple cross-site scripting (XSS) vulnerabilities in SAP NetWeaver Business Client (NWBC) for HTML 3.0 allow remote attackers to inject arbitrary web script or HTML via the (1) title or (2) roundtrips parameter, aka SAP Security Note 2051285."}, {"lang": "es", "value": "M\u00faltiples vulnerabilidades de XSS en SAP NetWeaver Business Client (NWBC) para HTML 3.0 permiten a atacantes remotos inyectar secuencias de comandos web o HTML arbitrarios a trav\u00e9s del par\u00e1metro (1) title o (2) roundtrips, tambi\u00e9n conocido como SAP Security Note 2051285."}], "lastModified": "2024-02-14T01:17:43.863", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:sap:netweaver_business_client_for_html:3.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7A028538-3CD2-4B9D-B34F-B1F4AEEC8AE5"}], "operator": "OR"}]}], "sourceIdentifier": "cve@mitre.org"}