Sap J2ee Engine
4 CVEs affecting Sap J2ee Engine. Latest disclosed: 2021-08-09. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2018-17865 | Medium | 6.1 | 2021-08-09 | A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcpro… |
CVE-2018-17862 | Medium | 6.1 | 2021-08-09 | A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to /… |
CVE-2018-17861 | Medium | 6.1 | 2021-08-09 | A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attackers to inject arbitrary web script via the wsdlLib parameter… |
CVE-2013-7357 | | 2014-04-10 | Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors. |