CVE-2018-17862: SAP j2ee Engine

Medium severity, CVSS 6.1. EPSS: 1.4% chance of exploitation in the next 30 days.

A cross-site scripting (XSS) vulnerability in SAP J2EE Engine/7.01/Fiori allows remote attackers to inject arbitrary web script via the sys_jdbc parameter to /TestJDBC_Web/test2. NOTE: This vulnerability only affects products that are no longer supported by the maintainer

Affected products

• SAP j2ee Engine: version 7.01 only

Published 2021-08-09. Last modified 2026-06-17.