Cross-site scripting (XSS) vulnerability in the ctcprotocol/Protocol servlet in SAP NetWeaver AS JAVA 7.3 allows remote malicious users to inject arbitrary web script or HTML via the sessionID parameter, aka SAP Security Note 2406783.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
sap netweaver application server java 7.30 |