CVE-2026-44752
HIGH
NVD
CVSS Score
8.2
Severity
HIGH
Published
Jul 14, 2026
Vendor
unknown
Description
SAP NetWeaver Application Server Java allows an unauthenticated attacker to inject malicious JavaScript through crafted URLs. When a victim accesses such a URL, the script executes in the user's browser, allowing the attacker to access sensitive session information and modify non-sensitive data displayed in the clientοΏ½s browser. This results in a high impact on confidentiality, low impact on integrity with no impact on availability of the application.