Cross-Site Scripting Vulnerability in SAP Manufacturing Integration and Intelligence
CVE-2026-76972

6.5MEDIUM

Key Information:

Vendor

SAP
Status
SAP Manufacturing Integration And Intelligence
Vendor
CVE Published:
13 October 2026

What is CVE-2026-76972?

A Cross-Site Scripting (XSS) vulnerability exists within SAP Manufacturing Integration and Intelligence, enabling an attacker to inject harmful scripts that are stored and later executed when viewed by an authenticated user. This vulnerability allows malicious actors to potentially gain access to user session information, alter the way web pages are displayed, and disrupt normal application functionality, posing risks to user data confidentiality and integrity.

Affected Version(s)

SAP Manufacturing Integration and Intelligence XMII 15.4

SAP Manufacturing Integration and Intelligence 15.5

References

https://me.sap.com/notes/3798823
https://url.sap/sapsecuritypatchday

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.