CVE-2017-16665 RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL.
MediumCVSS 6.1
EPSS 0.61%
- Published
- Updated
- Exploit status
- No public exploit known
Description
RemObjects Remoting SDK 9 1.0.0.0 for Delphi is vulnerable to a reflected Cross Site Scripting (XSS) attack via the service parameter to the /soap URI, triggering an invalid attempt to generate WSDL.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| remobjects remoting sdk 9 | = 1.0.0.0. | No fix listed |
References
- talk.remobjects.com issue-tracking