VYPR

MII

by SAP

CVEs (2)

  • CVE-2021-21480HigMar 9, 2021
    risk 0.61cvss 8.8epss 0.51

    SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment). An attacker can intercept a request to the server, inject malicious JSP code in the request and forward to server. When this dashboard is opened by users…

  • CVE-2026-44758CriAug 11, 2026
    risk 0.59cvss 9.1epss 0.01

    SAP Manufacturing Integration and Intelligence (MII) allows an attacker with high privileges to submit specially crafted input to certain affected functionality, which is processed without sufficient validation. Successful exploitation could allow the attacker to execute…