In SAP NetWeaver Application Server for ABAP from 7.0 to 7.02 7.30 7.31 7.40 and from 7.50 to 7.53 applications do not sufficiently encode user-controlled inputs resulting in Cross-Site Scripting (XSS) vulnerability.