CVE-2007-3496

SAP Web Dynpro Java (BC-WD-JAV) in SAP NetWeaver Nw04 SP15–SP19 and Nw04s SP7–SP11 is affected by a cross-site scripting (XSS) vulnerability that can be triggered via the User-Agent HTTP header. Affected components include SAP Java Technology Services 640 before SP20 and SAP Web Dynpro Runtime Co...

CVE-2007-3495

CVE-2007-3495 describes cross-site scripting (XSS) vulnerabilities in the SAP Internet Communication Framework (BC-MID-ICF) within SAP Basis, affecting 700 before SP12 and 640 before SP20. The issue allows remote attackers to inject arbitrary web script or HTML via certain parameters on the defau...