Description
Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783.
Unscored
CVE-2017-11458
EUVD-2017-3079GHSA-7jx4-2wj4-8hj2
Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject…
Published Jul 25, 2017 · Updated Aug 5, 2024 · Assigned by mitre