CVE-2026-44757

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...

CVE-2026-44757 Cross-Site Scripting (XSS) vulnerability in SAP Wily Introscope Enterprise Manager

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...

EUVD-2026-35288

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...

CVE-2026-44757

SAP Wily Introscope Enterprise Manager allows an unauthenticated attacker to craft a specially crafted URL. Under certain conditions, when accessed by a victim, the injected script could execute in the user�s browser within the context of the application. This issue has a low impact on the...

CVE-2026-44757

CVE-2026-44757 affects SAP Wily Introscope Enterprise Manager. The vulnerability is a Cross-Site Scripting (XSS) issue where an unauthenticated attacker can craft a specially crafted URL. When a victim visits the URL, injected script could execute in the user’s browser within the application cont...

CVE-2026-0500

Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager WorkStation, an unauthenticated attacker could create a malicious JNLP Java Network Launch Protocol file accessible by a public facing URL. When a victim clicks on the URL the accessed Wily Introscope...

CVE-2026-0500

The CVE-2026-0500 entry concerns SAP Wily Introscope Enterprise Manager (WorkStation). A vulnerable third‑party component enables an unauthenticated attacker to craft a malicious Java Network Launch Protocol (JNLP) file served at a public URL; when a victim opens it, the Wily Introscope Server co...

CVE-2026-0500 Remote code execution in SAP Wily Introscope Enterprise Manager (WorkStation)

Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager WorkStation, an unauthenticated attacker could create a malicious JNLP Java Network Launch Protocol file accessible by a public facing URL. When a victim clicks on the URL the accessed Wily Introscope...

PT-2026-2336

Name of the Vulnerable Software and Affected Versions SAP Wily Introscope Enterprise Manager WorkStation affected versions not specified Description An unauthenticated attacker can create a malicious Java Network Launch Protocol JNLP file accessible via a public URL. When a victim clicks this URL...

EUVD-2025-116989

Malicious code in wily-emerald-chicken npm...

Malicious code in wily-emerald-chicken (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4754f219c7da76642d10ef504b268b8b5566f8f0ee7e31d89cd98be4c53a9998 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-75213

Malicious code in wilywoodpecker-appteadev npm...

MAL-2025-110955 Malicious code in wily_woodpecker-appteadev (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 64c16f5f3a2c374b5732954b885076ae294a23195ab3bf172f727bb72ea1a76c This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-77466

Malicious code in wilyhedgehogpink-88 npm...

EUVD-2025-77915

Malicious code in wilycrawdadz3n npm...

EUVD-2025-72906

Malicious code in wilyaardwolfrequirement npm...

MAL-2025-97384 Malicious code in wily_aardwolf_requirement (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 4638a4a1c3027a32806ea374757168104ff02da65757b1d55878b6c575ab7bd0 This package appears to be part of the tea.xyz token reward campaign that flooded npm. These packages typically contain autopublish scripts auto.js,...

EUVD-2025-61750

Malicious code in wilycougarz3n npm...

EUVD-2025-51049

Malicious code in wily-plum-takin npm...

EUVD-2025-51050

Malicious code in wily-peach-slug npm...