NWDI Notification Service versions - 7.31 7.40 7.50 does not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.SAP NetWeaver Development Infrastructure Notification Service allows a threat actor to send crafted scripts to a victim. If the victim has an active session when the crafted script gets executed the threat actor could compromise information in victims session and gain access to some sensitive information also.