CVE-2026-76971

6.5 Moyenne

Publiée le 08/09/2026 à 03:17 · Modifiée le 08/09/2026 à 21:12 · En attente d'analyse NVD · Source : cna@sap.com

Description

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.

Traduire en français

Produits concernés

SAP_SE SAP Manufacturing Integration and Intelligence

Scores CVSS

Version	Score	Source	Vecteur
3.1	6.5 Moyenne	cna@sap.com	`CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L`

Faiblesses (CWE)

CWE-918

Références

https://me.sap.com/notes/3786489
https://url.sap/sapsecuritypatchday

Ailleurs

NVD
CVE.org
CIRCL Vulnerability-Lookup
CERT-FR
GitHub Advisories