Field Assessment
AI analysis pending.
CVE
CVE-2018-17865
Severity
MEDIUM
CVSS
6.1
EPSS
0.75%
Original Filing — NVD Description
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer