SAP NetWeaver AS ABAP versions - 740 750 751 752 753 754 does not sufficiently encode URL which allows an attacker to input malicious java script in the URL which could be executed in the browser resulting in Reflected Cross-Site Scripting (XSS) vulnerability.