SAP Wily Introscope Enterprise Manager Cross-Site Scripting Vulnerability

A cross-site scripting vulnerability has been identified in SAP Wily Introscope Enterprise Manager. This issue allows an unauthenticated attacker to create a specially crafted URL that, under certain conditions, could execute an injected script in the context of the user's browser within the application. The vulnerability has a low impact on the application's confidentiality and integrity, with no effect on availability.

Impact

Exploitation of this vulnerability could lead to cross-site scripting, allowing for the injection of malicious scripts that could be executed in the context of the user's browser.

Remediation

Users are advised to consult the SAP Security Notes for guidance on addressing this vulnerability. SAP Security Notes can be accessed through the SAP for Me platform.