SAP J2EE Engine Core

ソフト名：SAP J2EE Engine Core 6.4/7
回避策：SAP Note 1169248にて対応
脆弱性：XSS, 認証資格情報の奪取
ソース：http://service.sap.com/sap/support/notes/1169248
http://seclists.org/fulldisclosure/2010/Jul/287
http://www.securityfocus.com/bid/41805
http://secunia.com/advisories/40659
http://www.vupen.com/english/advisories/2010/1865
危険性：Medium Risk