What is GHSA-fcc6-f47w-v8rx?

GHSA-fcc6-f47w-v8rx is a security advisory published by GitHub Security Advisories with Medium severity. Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and...

Which CVE IDs does GHSA-fcc6-f47w-v8rx cover?

GHSA-fcc6-f47w-v8rx covers the following CVE IDs: CVE-2026-76971. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-fcc6-f47w-v8rx?

GHSA-fcc6-f47w-v8rx has a CVSS v3 base score of 6.5, published by GitHub Security Advisories.

GHSA-fcc6-f47w-v8rxMediumCVSS 6.5

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and...

Vendor

GitHub Security Advisories

Published

September 8, 2026

Last Modified

September 8, 2026

🔗 CVE IDs covered (1)

CVE-2026-76971 →

📋 Description

Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing Integration and Intelligence, an attacker could cause the server to initiate arbitrary outbound requests. If processed by the application, this behavior could be combined with XML/XSL processing to enable execution of scripts. Successful exploitation could result in a low impact on the confidentiality, integrity, and availability of the application.

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2026-76971
https://me.sap.com/notes/3786489
https://url.sap/sapsecuritypatchday
https://github.com/advisories/GHSA-fcc6-f47w-v8rx