What’s Vulnerable › Vulnerabilities
CVE-2026-44757: Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager
- Severity: medium (CVSS 4.7 v3.1)
- Exploited in the wild: not listed in CISA KEV
- EPSS: 0.2% probability of exploitation in the next 30 days
- Public exploit or detection template: none known
- Published: 2026-06-09 · updated 2026-07-23
- Weakness: CWE-79
Description
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the confidentiality and integrity of the application with no impact on availability.
Affected products
- SAP_SE SAP Wily Introscope Enterprise Manager: WILY_INTRO_ENTERPRISE 10.8
References
Get alerted when CVE-2026-44757 or the next vulnerability affects your stack