CVE-2026-58244: medium-severity vulnerability in SAP_SE SAP Manufacturing Integration and…
Missing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 4.3epss 0.3%
SAP Manufacturing Integration and Intelligence (MII) does not perform necessary authorization check on certain application function, allowing a low-privileged authenticated attacker to access information that should be restricted to privileged users. Successful exploitation could allow the attacker to access the users account information in the application, which could be leveraged to facilitate further attacks against the identified user accounts. This vulnerability results in low impact on confidentiality of the data, with no impact on the integrity and availability
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected products
SAP_SE · SAP Manufacturing Integration and IntelligenceRelated CVEs — SAP_SE SAP Manufacturing Integration and…
In the same product, most dangerous first.
CVE-2026-44758CRITICALCode Injection vulnerability in Manufacturing Integration and IntelligenceEPSS 0.8%CVE-2026-44763HIGHDirectory Traversal vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44765HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44764HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.3%CVE-2026-76971MEDIUMServer-Side Request Forgery in SAP Manufacturing Integration and IntelligenceEPSS 0.3%CVE-2026-76972MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.2%