SAP Enterprise Portal with ENGINEAPI versions 7.10, 7.30, 7.31, 7.40, and 7.50 suffers from an XSLT injection vulnerability.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/165751/ONAPSIS-2021-0026.txt
Source: https://packetstormsecurity.com/files/165751/SAP-Enterprise-Portal-XSLT-Injection.html