SAP NetWeaver Nw04 versions SP15 to SP 19 and SAP NetWeaver Nw04s versions SP7 to SP 11 suffer from a cross site scripting flaw.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/57370/netweaver-xss.txt
Source: https://packetstormsecurity.com/files/57370/netweaver-xss.txt.html