Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
server-side request forgery vulnerabilities and exploits
(subscribe to this query)
8.6
CVSSv3
CVE-2018-15517
The MailConnect feature on D-Link Central WiFiManager CWM-100 1.03 r0098 devices is intended to check a connection to an SMTP server but actually allows outbound TCP to any port on any IP address, leading to SSRF, as demonstrated by an index.php/System/MailConnect/host/127.0.0.1/...
Dlink Central Wifimanager 1.03
NA
CVE-2015-6388
Cisco Unified Computing System (UCS) Central software 1.3(0.1) allows remote malicious users to conduct server-side request forgery (SSRF) attacks via a crafted request, aka Bug ID CSCux33575.
Cisco Unified Computing System Central Software 1.3\\(0.1\\)
6.5
CVSSv3
CVE-2018-10174
Digital Guardian Management Console 7.1.2.0015 has an SSRF issue that allows remote malicious users to read arbitrary files via file:// URLs, send TCP traffic to intranet hosts, or obtain an NTLM hash. This can occur even if the logged-in user has a read-only role.
Digitalguardian Management Console 7.1.2.0015
7.5
CVSSv3
CVE-2019-12633
A vulnerability in Cisco Unified Contact Center Express (Unified CCX) could allow an unauthenticated, remote malicious user to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. The vulnerability is due to improper validation of u...
Cisco Unified Contact Center Express
Cisco Unified Contact Center Express 12.0\\(1\\)
7.5
CVSSv3
CVE-2023-46262
An unauthenticated attacked could send a specifically crafted web request causing a Server-Side Request Forgery (SSRF) in Ivanti Avalanche Remote Control server.
Ivanti Avalanche
5.4
CVSSv3
CVE-2023-38624
A post-authenticated server-side request forgery (SSRF) vulnerability in Trend Micro Apex Central 2019 (lower than build 6481) could allow an malicious user to interact with internal or local services directly. Please note: an attacker must first obtain the ability to execute low...
Trendmicro Apex Central 2019
6.1
CVSSv3
CVE-2017-9506
The IconUriServlet of the Atlassian OAuth Plugin from version 1.3.0 before version 1.9.12 and from version 2.0.0 before version 2.0.4 allows remote malicious users to access the content of internal network resources and/or perform an XSS attack via Server Side Request Forgery (SS...
Atlassian Oauth 1.3.3
Atlassian Oauth 1.3.4
Atlassian Oauth 1.3.5
Atlassian Oauth 1.3.6
Atlassian Oauth 1.6.0
Atlassian Oauth 1.6.1
Atlassian Oauth 1.7.0
Atlassian Oauth 1.8.0
Atlassian Oauth 1.9.5
Atlassian Oauth 1.9.6
Atlassian Oauth 1.9.7
Atlassian Oauth 1.9.8
Atlassian Oauth 1.4.0
Atlassian Oauth 1.4.1
Atlassian Oauth 1.5.0
Atlassian Oauth 1.8.4
Atlassian Oauth 1.8.5
Atlassian Oauth 1.9.0
Atlassian Oauth 2.0.1
Atlassian Oauth 2.0.2
Atlassian Oauth 2.0.3
Atlassian Oauth 1.3.0
6 Github repositories
8.8
CVSSv3
CVE-2021-1272
A vulnerability in the session validation feature of Cisco Data Center Network Manager (DCNM) could allow an unauthenticated, remote malicious user to bypass access controls and conduct a server-side request forgery (SSRF) attack on a targeted system. This vulnerability is due to...
Cisco Data Center Network Manager
NA
CVE-2020-161712
Acronis Cyber Backup version 12.5 Build 16341 suffers from a server-side request forgery vulnerability.
NA
CVE-2020-161712020
Acronis Cyber Backup version 12.5 Build 16341 suffers from a server-side request forgery vulnerability.
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-2907
hardcoded
inject
CVE-2024-20359
CVE-2024-2467
CVE-2024-4077
CVE-2024-22391
camera
CVE-2024-20353
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
7
8
9
NEXT »