SAP NetWeaver - versions 700 701 702 730 does not sufficiently encode user-controlled inputs allowing an attacker to cause a potential victim to supply a malicious content to a vulnerable web application which is then reflected to the victim and executed by the web browser resulting in Cross-Site Scripting vulnerability.