Security SAP NetWeaver J2EE Engine 7.40 Cross Site Scripting April 19, 2016 007admin SAP NetWeaver J2EE Engine version 7.40 suffers from a cross site scripting vulnerability.