Lucene search

K
vulnrichmentMitreVULNRICHMENT:CVE-2018-17865
HistoryAug 09, 2021 - 6:30 p.m.

CVE-2018-17865

2021-08-0918:30:33
mitre
github.com
2
sap
cross-site scripting
vulnerability
remote attackers
web script
j2ee engine

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

45.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

AI Score

5.8

Confidence

High

EPSS

0.001

Percentile

45.5%

SSVC

Exploitation

none

Automatable

no

Technical Impact

total

Related for VULNRICHMENT:CVE-2018-17865