CVE-2007-3495

CVE-2007-3495 describes cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) within SAP Basis, affecting 700 before SP12 and 640 before SP20. The issue allows remote attackers to inject arbitrary web script or HTML via certain parameters on the defau...