CVE-2018-2405: Improper Neutralization of Input During Web Page Generation

SAP Solution Manager, 7.10, 7.20, Incident Management Work Center allows an attacker to upload a malicious script as an attachment and this could lead to possible Cross-Site Scripting...