CVE-2026-44757 — Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager

CVE-2026-44757

Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager PUBLISHED

Description (CNA)

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the confidentiality and integrity of the application with no impact on availability.

Affected (CNA)

Vendor / product	Versions
SAP_SE / SAP Wily Introscope Enterprise Manager	affected WILY_INTRO_ENTERPRISE 10.8

CWE

CWE-79

References

https://me.sap.com/notes/3715280
https://url.sap/sapsecuritypatchday

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.