SAP » J2ee Engine : Security Vulnerabilities, CVEs, CVSS score >= 4
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Max CVSS
6.1
EPSS Score
0.11%
Published
2021-08-09
Updated
2024-04-11
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to /TestJDBC_Web/test2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Max CVSS
6.1
EPSS Score
0.16%
Published
2021-08-09
Updated
2024-04-11
A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attackers to inject arbitrary web script via the wsdlLib parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer
Max CVSS
6.1
EPSS Score
0.16%
Published
2021-08-09
Updated
2024-04-11
Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors.
Max CVSS
5.0
EPSS Score
0.20%
Published
2014-04-10
Updated
2014-04-11
4 vulnerabilities found