3800505 - Introscope EM Security Vulnerabilities & Fixes

Symptom

A security scan of the SAP Wily Introscope landscape reports one or more vulnerabilities affecting Introscope Enterprise Manager, Workstation, bundled Java libraries, Spring Framework, Log4j, Logback, OpenJDK, SnakeYAML, or HTTP security configuration.

The reported findings may include:

CVE-2021-44228
CVE-2024-38816
CVE-2024-38819
CVE-2024-22243
CVE-2024-22259
CVE-2023-21930
CVE-2024-20918
CVE-2022-42889
CVE-2022-1471
CVE-2023-6481
CVE-2023-6378
CVE-2026-0500
HTTP OPTIONS or missing HSTS security-header findings

Environment

SAP Solution manager 7.2

Product

SAP Solution Manager 7.2

Keywords

Introscope Enterprise Manager Security Vulnerabilities,CVE Remediation and Mitigation,Log4j Vulnerability (CVE-2021-44228),Spring Framework Vulnerabilities (CVE-2024-38816, CVE-2024-38819),OpenJDK Security Vulnerabilities,SnakeYAML Deserialization Vulnerability (CVE-2022-1471),Remote Code Execution (CVE-2026-0500),Introscope EM Upgrade and Patch Management,Introscope Workstation JNLP Security Risk,SAP Solution Manager and Introscope Compatibility , KBA , XX-PART-WILY , Introscope by CA Technologies , Problem

About this page

This is a preview of a SAP Knowledge Base Article. Click more to access the full version on SAP for Me (Login required).

Search for additional results

Visit SAP Support Portal's SAP Notes and KBA Search.