Vulnerabilities > SAP > Manufacturing Integration AND Intelligence

DATE CVE VULNERABILITY TITLE RISK
2021-03-09 CVE-2021-21480 Code Injection vulnerability in SAP Manufacturing Integration and Intelligence
SAP MII allows users to create dashboards and save them as JSP through the SSCE (Self Service Composition Environment).
network
low complexity
sap CWE-94
8.8
8.8
2019-02-15 CVE-2019-0267 Cross-Site Request Forgery (CSRF) vulnerability in SAP Manufacturing Integration and Intelligence 15.0/15.1/15.2
SAP Manufacturing Integration and Intelligence, versions 15.0, 15.1 and 15.2, (Illuminator Servlet) currently does not provide Anti-XSRF tokens.
network
low complexity
sap CWE-352
8.8
8.8