CVE-2014-1960
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote...
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
Exploit likelihood
What each source reports
NVD Score used
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
- Record
CVE-2014-1960- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:P/I:N/A:N - Weakness
- CWE-264
- Updated
- 2026-11-02
CVE List No score
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
- Record
CVE-2014-1960- Updated
- 2026-11-02
EUVDEUVD-2014-2013 No score
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
- Record
EUVD-2014-2013- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-xh46-6cwm-rgh4 No score
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote...
The Solution Manager in SAP NetWeaver does not properly restrict access, which allows remote attackers to obtain sensitive information via unspecified vectors.
- Record
GHSA-xh46-6cwm-rgh4- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2014-1960 is a medium vulnerability (CVSS 5.0) in Sap Netweaver, published February 14, 2014. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 1.37%, the 72nd percentile. No source names a fixed version.
References
service.sap.com/sap/support/notes/1828885
exchange.xforce.ibmcloud.com/vulnerabilities/91093
scn.sap.com/docs/DOC-8218
secunia.com/advisories/56942
erpscan.io/advisories/erpscan-14-004-sap-netweaver-solution-manager-missing-authorization-check-information-disclosure
nvd.nist.gov/vuln/detail/CVE-2014-1960
github.com/advisories/GHSA-xh46-6cwm-rgh4