Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
server-side request forgery vulnerabilities and exploits
(subscribe to this query)
5
CVSSv2
CVE-2015-6388
Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote malicious users to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.
Cisco Unified Computing System Central Software 1.3\\(0.1\\)
4
CVSSv2
CVE-2018-10174
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote malicious users to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
Digitalguardian Management Console 7.1.2.0015
5
CVSSv2
CVE-2019-12633
A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote malicious user to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of u...
Cisco Unified Contact Center Express
Cisco Unified Contact Center Express 12.0\\(1\\)
NA
CVE-2023-46262
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche Remote Control server.
Ivanti Avalanche
5
CVSSv2
CVE-2019-15021
A security vulnerability exists in the Zingbox Inspector versions 1.294 and previous versions, that can allow an malicious user to easily identify instances of Zingbox Inspectors in a local area network.
Zingbox Inspector
6.4
CVSSv2
CVE-2017-10246
Vulnerability in the Oracle Application Object Library component of Oracle E-Business Suite (subcomponent: iHelp). Supported versions that are affected are 12.1.3, 12.2.3, 12.2.4, 12.2.5 and 12.2.6. Easily exploitable vulnerability allows unauthenticated attacker with network acc...
Oracle Application Object Library 12.2.6
Oracle Application Object Library 12.2.3
Oracle Application Object Library 12.2.4
Oracle Application Object Library 12.2.5
Oracle Application Object Library 12.1.3
1 EDB exploit
4.3
CVSSv2
CVE-2017-9506
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote malicious users to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SS...
Atlassian Oauth 1.3.3
Atlassian Oauth 1.3.4
Atlassian Oauth 1.3.5
Atlassian Oauth 1.3.6
Atlassian Oauth 1.6.0
Atlassian Oauth 1.6.1
Atlassian Oauth 1.7.0
Atlassian Oauth 1.8.0
Atlassian Oauth 1.9.5
Atlassian Oauth 1.9.6
Atlassian Oauth 1.9.7
Atlassian Oauth 1.9.8
Atlassian Oauth 1.4.0
Atlassian Oauth 1.4.1
Atlassian Oauth 1.5.0
Atlassian Oauth 1.8.4
Atlassian Oauth 1.8.5
Atlassian Oauth 1.9.0
Atlassian Oauth 2.0.1
Atlassian Oauth 2.0.2
Atlassian Oauth 2.0.3
Atlassian Oauth 1.3.0
6 Github repositories
5
CVSSv2
CVE-2021-25236
A server-side request forgery (SSRF) information disclosure vulnerability in Trend Micro OfficeScan XG SP1 and Worry-Free Business Security 10.0 SP1 could allow an unauthenticated user to locate online agents via a specific sweep.
Trendmicro Officescan Xg
Trendmicro Worry-free Business Security 10.0
6.4
CVSSv2
CVE-2020-16171
An issue exists in Acronis Cyber Backup prior to 12.5 Build 16342. Some API endpoints on port 9877 under /api/ams/ accept an additional custom Shard header. The value of this header is afterwards used in a separate web request issued by the application itself. This can be abused ...
Acronis Cyber Backup
Acronis Cyber Backup 12.5
NA
CVE-2020-161712
Acronis Cyber Backup version 12.5 Build 16341 suffers from a server-side request forgery vulnerability.
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-3012
CVE-2024-30200
XXE
CVE-2023-24955
CVE-2023-42931
CVE-2024-29231
remote code execution
cross-site scripting
CVE-2024-0677
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »