← CVE Intelligence

CVE-2018-17865

n/a / n/a PUBLISHED

Description (CNA)

A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected (CNA)

Vendor / productVersions
n/a / n/aaffected n/a

CWE

No CWE identifiers supplied.

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.