The Internet Communication Framework from SAP suffers from a cross site scripting vulnerability. SAP Basis component versions 640 SP19 and below and SAP Basis component versions 700 SP11 and below are vulnerable.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57334/icf-xss.txt
Source: https://packetstormsecurity.com/files/57334/icf-xss.txt.html