CVE-2017-11458
CVE-2017-11458
Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote attackers to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783.
Affected products
n/a · n/aWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →