SAP Netweaver Cross-Site Scripting Vulnerability (CNVD-2021-103657)

SAP Netweaver is a set of integrated service-oriented application platforms from SAP, a German company. SAP Netweaver is vulnerable to a cross-site scripting vulnerability in versions 700, 701, 702, and 730, which stems from under-coded user-controlled input. The vulnerability could be exploited to allow a potential victim to provide malicious content to a vulnerable web application, which could then be reflected back to the victim and executed by the web browser.