SAP Introscope Enterprise Manager vulnerabilities

2 CVEs affecting SAP Introscope Enterprise Manager, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-0500, published 2026-01-13.

More from SAP.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2020-6364, published 2020-10-15. Critical severity, CVSS 10.0. EPSS: 6.4% chance of exploitation in the next 30 days. SAP Solution Manager and SAP Focused Run (update provided in WILY_INTRO_ENTERPRISE 9.7, 10.1, 10.5, 10.7), allows an attacker to modify a cookie in a way that OS commands can be executed and…
• CVE-2026-0500, published 2026-01-13. High severity, CVSS 8.8. EPSS: 0.4% chance of exploitation in the next 30 days. Due to the usage of vulnerable third party component in SAP Wily Introscope Enterprise Manager (WorkStation), an unauthenticated attacker could create a malicious JNLP (Java Network Launch Protocol)…