Fatih Ozavci

**Name of the Vulnerable Software and Affected Versions** SAP NetWeaver Business Client (NWBC) for HTML version 3.0 **Description** The issue allows remote attackers to inject arbitrary web script or HTML, which can lead to multiple cross-site scripting (XSS) vulnerabilities. This is achieved by injecting malicious code via the `title` or `roundtrips` parameter. **Recommendations** For SAP NetWeaver Business Client (NWBC) for HTML version 3.0, consider restricting access to the vulnerable parameters `title` and `roundtrips` to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Stonesoft StoneGate IPS versions prior to 4.0 **Description** The issue makes it easier for remote attackers to scan or penetrate systems and avoid detection by not properly decoding Fullwidth/Halfwidth Unicode encoded data. **Recommendations** For versions prior to 4.0, update to version 4.0 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** IBM ISS Proventia Series products, including the A, G, and M series (affected versions not specified) **Description** The issue is related to the improper handling of certain full-width and half-width Unicode character encodings in HTTP traffic. This could potentially allow remote attackers to evade detection. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** 3Com TippingPoint IPS (affected versions not specified) **Description** The issue concerns the improper handling of certain full-width and half-width Unicode character encodings in an HTTP POST request. This could potentially allow remote attackers to evade detection of HTTP traffic. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.