CVE-2026-76971: medium-severity vulnerability in SAP_SE SAP Manufacturing Integration and…
Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence
Published
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 6.5epss 0.3%
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Affected products
SAP_SE · SAP Manufacturing Integration and IntelligenceRelated CVEs — SAP_SE SAP Manufacturing Integration and…
In the same product, most dangerous first.
CVE-2026-44758CRITICALCode Injection vulnerability in Manufacturing Integration and IntelligenceEPSS 0.8%CVE-2026-44763HIGHDirectory Traversal vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44765HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44764HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.3%CVE-2026-58244MEDIUMMissing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)EPSS 0.3%CVE-2026-76972MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.2%