CVE-2026-76972
6.5MediumPublished 13 Oct 2026 · NVD status: Awaiting Analysis · AI triage by gemini-3.8-flash
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- Low
- User interaction
- Required
- Impact
- Limited impact
- Weakness
- CWE-79
Impact
An authenticated low-privileged user can run malicious JavaScript in another user's browser to steal session data or modify page content. This requires an attacker to inject stored content and trick or wait for a victim to view the affected page.
Root cause
The application fails to sanitize or encode user-supplied input before storing and rendering it on generated web pages, enabling stored cross-site scripting (XSS).
Affected systems
SAP Manufacturing Integration and Intelligence (versions not listed — check the vendor advisory).
CVSS v3.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L
Fix & remediation
Apply SAP Security Note 3798823 from the SAP Support Portal to deploy the vendor patch. No standalone interim mitigation or configuration workaround is documented in the advisory.
AI-suggested. Run it in staging first and check it against the vendor advisory. Why?
NVD description
Due to a Cross-Site Scripting (XSS) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could store malicious content that is later rendered by the application. If an authenticated victim accesses a page that displays this stored content, the injected input is processed during web page generation, resulting in the execution of malicious content in the victim�s browser context. This could allow the attacker to access or modify information within the victim�s browser scope. Successful exploitation could allow the attacker to access session information, modify rendered page content and disrupt the victim's use of the application, resulting in a low impact on confidentiality, integrity and availability.