Onapsis Security Advisory – The SAP J2EE Engine contains a Web Services Navigator interface, which enables the interaction with the deployed Web Services in the server. This interface suffers from a Cross-Site Scripting vulnerability, which may enable malicious parties to perform different kind of attacks over SAP users.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/92010/OSA-2010-006.txt
Source: https://packetstormsecurity.com/files/92010/SAP-J2EE-Web-Services-Navigator-Cross-Site-Scripting.html