SAP NetWeaver J2EE engine version 7.40 suffers from a cross site scripting vulnerability. Continue reading...