CVE-2018-17861

MEDIUM 6.1CVE-2018-17861 · Published 09/08/2021 · updated 17/06/2026

In short

CVE-2018-17861 is a MEDIUM (CVSS 6.1) vulnerability affecting j2ee engine (sap).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 75.0% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
j2ee engine sap	`= 7.01`	No fix yet

Description

A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attackers to inject arbitrary web script via the wsdlLib parameter to /ctcprotocol/Protocol. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

References

packetstormsecurity.com/files/151945/SAP-J2EE-Engine-7.01-Portal-EPP-Protocol-Cross-Site-Scripting.html · Third Party Advisory
seclists.org/fulldisclosure/2019/Mar/6 · Mailing List
seclists.org/bugtraq/2019/Mar/4 · Mailing List

More vulnerabilities in j2ee engine

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free