CVE-2009-2932: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in uddiclient/process in the UDDI client in SAP NetWeaver Application Server Java 7.0 allows remote attackers to inject arbitrary web script or HTML via the TModel Key field...

CVE-2007-3615: Undefined Security Weakness

Internet Communication Manager aka ICMAN.exe or ICM in SAP NetWeaver Application Server 6.x and 7.x, possibly only on Windows, allows remote attackers to cause a denial of service process crash via a URI of a certain length that contains a sap-isc-key parameter, related to configuration of a web...