Sap J2Ee Engine vulnerabilities
3 known vulnerabilities affecting sap/j2ee_engine.
Total CVEs
3
CISA KEV
0
Public exploits
0
Exploited in wild
0
Severity breakdown
MEDIUM3
Vulnerabilities
Page 1 of 1
CVE-2018-17862MEDIUMCVSS 6.1v7.012021-08-09
CVE-2018-17862 [MEDIUM] CWE-79 CVE-2018-17862: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to /TestJDBC_Web/test2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
nvd
CVE-2018-17865MEDIUMCVSS 6.1v7.012021-08-09
CVE-2018-17865 [MEDIUM] CWE-79 CVE-2018-17865: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
nvd
CVE-2018-17861MEDIUMCVSS 6.1v7.012021-08-09
CVE-2018-17861 [MEDIUM] CWE-79 CVE-2018-17861: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attacker
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attackers to inject arbitrary web script via the wsdlLib parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
nvd