CVE-2026-76971: falha de média gravidade em SAP_SE SAP Manufacturing Integration and…
Server-Side Request Forgery in SAP Manufacturing Integration and Intelligence
Publicada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 6.5epss 0.3%
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Produtos afetados
SAP_SE · SAP Manufacturing Integration and IntelligenceCVEs relacionadas — SAP_SE SAP Manufacturing Integration and…
No mesmo produto, das mais perigosas para as menos.
CVE-2026-44758CRITICALCode Injection vulnerability in Manufacturing Integration and IntelligenceEPSS 0.8%CVE-2026-44763HIGHDirectory Traversal vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44765HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.4%CVE-2026-44764HIGHMissing Authorization Check in SAP Manufacturing Integration and IntelligenceEPSS 0.3%CVE-2026-58244MEDIUMMissing Authorization Check in SAP Manufacturing Integration and Intelligence (MII)EPSS 0.3%CVE-2026-76972MEDIUMCross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and IntelligenceEPSS 0.2%