CVE:CVE-2007-3496
CNNVD:CNNVD-200706-529
SAP NetWeaver Nw04中存在跨站脚本攻击漏洞。远程攻击者可以借助用户-代理HTTP的头部，注入任意的web脚本或HTML。
solution:Upgrade sap netweaver_nw04 to a higher version than sp15,sp16,sp17,sp18,sp19,and avoid the version sp15,sp16,sp17,sp18,sp19; Upgrade sap netweaver_nw04s to a higher version than sp7,sp8,sp9,sp10,sp11,and avoid the version sp7,sp8,sp9,sp10,sp11; Upgrade sap sap_basis_component_640 to a higher version than sp19,and avoid the version (,sp19]; Upgrade sap sap_basis_component_700 to a higher version than sp11,and avoid the version (,sp11]