J2ee Engine (Sap) - vulnerabilities (CVEs)

4 CVEs, 0 in the last 30 days, 2 known versions, newest CVE from 2021-08-09. Vendor: Sap.

CVEs of J2ee Engine

• CVE-2018-17862 - CVSS 6.1 (medium), 2021-08-09: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to…
• CVE-2018-17861 - CVSS 6.1 (medium), 2021-08-09: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Portal/EPP allows remote attackers to inject arbitrary web script via the wsdlLib parameter…
• CVE-2018-17865 - CVSS 6.1 (medium), 2021-08-09: A cross-site scripting (XSS) vulnerability in SAP J2EE Engine 7.01 allows remote attackers to inject arbitrary web script via the wsdlPath parameter to…
• CVE-2013-7357 - CVSS 5 (medium), 2014-04-10: Unspecified vulnerability in the configuration service in SAP J2EE Engine allows remote attackers to obtain credential information via unknown vectors.