CVE-2026-44746

Name of the Vulnerable Software and Affected Versions SAP NetWeaver JAVA (affected versions not specified)

Description A reflected cross-site scripting (XSS) issue exists in the JDBC Test Servlet. An unauthenticated attacker can craft a URL containing a malicious script that is executed in the victim's browser when the link is clicked. This occurs because the injected input is processed during the generation of the web page, potentially allowing the attacker to access or modify webclient information, which affects the confidentiality and integrity of the application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.