CVE-2026-76971: fallo de gravedad media en SAP_SE SAP Manufacturing Integration and…
Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence
Publicada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.5epss 0.3%
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Productos afectados
SAP_SE · SAP Manufacturing Integration and IntelligenceCVEs relacionadas — SAP_SE SAP Manufacturing Integration and…
En el mismo producto, de las más peligrosas a las menos.
CVE-2026-44758CRITICALCode Injection vulnerability in Manufacturing Integration and IntelligenceEPSS 0.8%CVE-2026-44763HIGHDirectory Traversal vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44765HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44764HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.3%CVE-2026-58244MEDIUMMissing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)EPSS 0.3%CVE-2026-76972MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.2%