The vulnerability is a stored XSS flaw in SAP Manufacturing Integration and Intelligence. An attacker can embed malicious scripts into data that the application persists. When an authenticated user later requests a page containing that data, the application injects the script into the rendered HTML, causing the victim’s browser to execute the attacker’s code. This can expose session tokens, allow tampering with page content, and disrupt normal use, although it is described as having low impact on overall confidentiality, integrity, and availability.

The flaw exists in SAP Manufacturing Integration and Intelligence as distributed by SAP SE. No specific versions are listed, meaning that any deployment of this product that incorporates the vulnerable component may be affected.

The CVSS score of 6.5 indicates a moderate risk level. Exploit probability data is not available and the vulnerability is not listed in the CISA KEV catalog. It is inferred that the attacker must first inject malicious content via any writable interface (the input area used to create or edit stored data) and then have an authenticated victim view that content. Because the exploit runs in the victim’s browser context, it is not a traditional remote code execution flaw, but it can still compromise the victim’s session the integrity of the displayed information.