Cross-Site Scripting Vulnerabilities in SAP NetWeaver Business Client

CVE-2014-9569

Summary

Multiple cross-site scripting (XSS) vulnerabilities exist in the SAP NetWeaver Business Client for HTML 3.0, permitting remote attackers to inject arbitrary web scripts or HTML. These vulnerabilities can be exploited through manipulation of specific parameters, namely the 'title' and 'roundtrips', which may compromise the security of the web application and its users. Affected users are at risk of unauthorized actions being executed in their web sessions, underscoring the importance of security practices in web development and application management.

References