{"vulnerability": "CVE-2026-89117", "sightings": [{"uuid": "02b1fc34-1c07-4c9a-8d90-c05997dcd78a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-89117", "type": "seen", "source": "https://infosec.exchange/users/cve/statuses/117430924315979355", "content": "CVE-2026-89117 Cross-Site Scripting (XSS) vulnerability in SAP NetWeaver Enterprise Portal SAP NetWeaver Enterprise Portal allows an unauthenticated attacker to inject malicious scripts into a URL parameter. The scripts are reflected in the server response and executed in a user's browser when the crafted URL is visited, leading to theft of session information, manipulation of portal content, or user redirection. This results in a low impact on confidentiality and integrity. There is no impact on availability.\nhttps://www.cve.org/CVERecord?id=CVE-2026-89117https://me.sap.com/notes/3779985https://url.sap/sapsecuritypatchday#sap #url #SAP_SE #SAPNetWeaverEnterprisePortal#CVE_2026_89117#bot", "creation_timestamp": "2026-10-13T01:08:24.082864Z"}]}