64 matches found
CVE-2020-6364
CVE-2020-6364 CA APM Team Center Wily Introscope에서의 원격 코드 실행. 원본 권고 CA APM Team Center의 역직렬화 취약점으로 인해 서버에서 인증되지 않은 원격 코드 실행이 발생합니다. 서버에 인증할 때 악명 높은 rO0 문자열로 시작하는 쿠키가 반환되는데, 이는 base64로 인코딩된 직렬화 객체를 나타냅니다. 정적으로 문제를 완전히 추적하지는 않았지만, 다음 코드가 취약점이 있는 코드일 것입니다. public class HttpRequestHeaderInfo implemen...
The server’s vulnerability regarding the collection, storage, and display of performance data for SAP systems. The SAP Wily Introscope Enterprise Manager (EM) is vulnerable due to insufficient protection of the website structure, allowing attackers to perform cross-site scripting attacks (XSS).
The vulnerability of the server for collecting, storing, and displaying performance data in SAP SAP Wily Introscope Enterprise Manager is related to insufficient protection of the website structure. Exploiting this vulnerability allows a malicious actor to perform cross-site scripting attacks XSS...
CVE-2026-44757
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...
CVE-2026-44757
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...
EUVD-2026-35288
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...
CVE-2026-44757 Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...
CVE-2026-44757
CVE-2026-44757 affects SAP Wily Introscope Enterprise Manager. The vulnerability is a Cross-Site Scripting (XSS) issue where an unauthenticated attacker can craft a specially crafted URL. When a victim visits the URL, injected script could execute in the user’s browser within the application cont...
CVE-2026-44757: Improper Neutralization of Input During Web Page Generation
SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...
SAP Wily Introscope Enterprise Manager 跨站脚本漏洞
SAP Wily Introscope Enterprise Manager is an application performance management component developed by the German company SAP. SAP Wily Introscope Enterprise Manager has a cross-site scripting vulnerability. This vulnerability stems from allowing unauthenticated attackers to construct malicious...
The application for advanced analysis, creation of custom monitoring panels, and detailed examination of Workstation server metrics for data collection, storage, and display is vulnerable. The SAP SAP Wily Introscope Enterprise Manager (EM) allows attackers to execute arbitrary code.
The vulnerability of the advanced analysis application, which allows for the creation of custom monitoring panels and detailed examination of server metrics related to SAP Workstation systems, for data collection, storage, and display is related to improper code generation. Exploiting this...
CVE-2026-0500
Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager WorkStation, an unauthenticated attacker could create a malicious JNLP Java Network Launch Protocol file accessible by a public facing URL. When a victim clicks on the URL the accessed Wily Introscope...
CVE-2026-0500 Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)
Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager WorkStation, an unauthenticated attacker could create a malicious JNLP Java Network Launch Protocol file accessible by a public facing URL. When a victim clicks on the URL the accessed Wily Introscope...
CVE-2026-0500
The CVE-2026-0500 entry concerns SAP Wily Introscope Enterprise Manager (WorkStation). A vulnerable third‑party component enables an unauthenticated attacker to craft a malicious Java Network Launch Protocol (JNLP) file served at a public URL; when a victim opens it, the Wily Introscope Server co...
CVE-2026-0500: Improper Control of Generation of Code
Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager WorkStation, an unauthenticated attacker could create a malicious JNLP Java Network Launch Protocol file accessible by a public facing URL. When a victim clicks on the URL the accessed Wily Introscope...
PT-2026-2336
Name of the Vulnerable Software and Affected Versions SAP Wily Introscope Enterprise Manager WorkStation affected versions not specified Description An unauthenticated attacker can create a malicious Java Network Launch Protocol JNLP file accessible via a public URL. When a victim clicks this URL...
Malicious code in wily-emerald-chicken (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4754f219c7da76642d10ef504b268b8b5566f8f0ee7e31d89cd98be4c53a9998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...
EUVD-2025-116989
Malicious code in wily-emerald-chicken npm...
EUVD-2025-75213
Malicious code in wilywoodpecker-appteadev npm...
MAL-2025-110955 Malicious code in wily_woodpecker-appteadev (npm)
--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16f5f3a2c374b5732954b885076ae294a23195ab3bf172f727bb72ea1a76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...