CVE-2026-76971
published 2026-09-08CVE-2026-76971: Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate…
PriorityP337medium6.5CVSS 3.1
AVNACLPRLUIRSCCLILAL
EPSS
0.25%
15.5th percentile
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
| sap_se | sap_manufacturing_integration_and_intelligence | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
VulDB
SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 XSL Processing server-side request forgery
vuldb·2026-09-08·CVSS 6.5
CVE-2026-76971 [MEDIUM] SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4 XSL Processing server-side request forgery
A vulnerability marked as critical has been reported in SAP Manufacturing Integration and Intelligence 15.5/XMII 15.4. This issue affects some unknown processing of the component XSL Processing. Performing a manipulation results in server-side request forgery.
This vulnerability is identified as CVE-2026-76971. The attack can be initiated remotely. There is not any exploit available.
GHSA
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests.
ghsa_unreviewed·2026-09-08
CVE-2026-76971 [MEDIUM] CWE-918 Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests.
Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2026-09-08
Published