CVE-2026-44752

Name of the Vulnerable Software and Affected Versions SAP NetWeaver Application Server Java (affected versions not specified)

Description The Configuration Wizard web interface fails to properly protect the web page structure, allowing an unauthenticated remote attacker to inject malicious JavaScript via crafted URLs. When a victim accesses the URL, the script executes in their browser, enabling the attacker to access sensitive session information and modify non-sensitive data displayed in the client browser. This issue leads to a high impact on confidentiality and a low impact on integrity.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.