Field Assessment
AI analysis pending.
CVE
CVE-2017-11458
Severity
MEDIUM
CVSS
6.1
EPSS
0.97%
Java
Original Filing — NVD Description
Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783.