{ "schema_version": "1.4.0", "id": "GHSA-vh4v-hvc5-vp46", "modified": "2022-05-17T04:44:25Z", "published": "2022-05-17T04:44:25Z", "aliases": [ "CVE-2014-3134" ], "details": "Cross-site scripting (XSS) vulnerability in the InfoView application in SAP BusinessObjects allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.", "severity": [], "affected": [], "references": [ { "type": "ADVISORY", "url": "https://nvd.nist.gov/vuln/detail/CVE-2014-3134" }, { "type": "WEB", "url": "https://service.sap.com/sap/support/notes/1931399" }, { "type": "WEB", "url": "http://scn.sap.com/docs/DOC-8218" }, { "type": "WEB", "url": "http://seclists.org/fulldisclosure/2014/Apr/303" }, { "type": "WEB", "url": "http://www.onapsis.com/resources/get.php?resid=adv_onapsis-2014-010" }, { "type": "WEB", "url": "http://www.securityfocus.com/bid/67110" } ], "database_specific": { "cwe_ids": [ "CWE-79" ], "severity": "MODERATE", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2014-04-30T14:22:00Z" } }