CVE-2010-1609

Cross-site scripting (XSS) vulnerability in SAP NetWeaver 2004 before SP21 and 2004s before SP13 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.

Date published : 2010-04-29

http://www.securityfocus.com/archive/1/509499/100/0/threaded

http://archives.neohapsis.com/archives/fulldisclosure/2010-02/0216.html