Java Proxy Runtime of SAP NetWeaver Process Integration versions 7.10 7.11 7.30 7.31 7.40 7.50 does not sufficiently encode user-controlled inputs and allows an attacker to execute malicious scripts in the url thereby resulting in Reflected Cross-Site Scripting (XSS) vulnerability