SAP Disclosure Management, before version 10.1, does not validate user input properly in specific use cases leading to Cross-Site Scripting.Referenceshttps://launchpad.support.sap.com/#/notes/2772325https://wiki.scn.sap.com/wiki/pages/viewpage.action?pageId=533671771
