VYPR

CWE-918

Server-Side Request Forgery (SSRF)

BaseIncomplete

Description

The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.

Hierarchy (View 1000)

Parents

Children

none

Related attack patterns (CAPEC)

CAPEC-664

CVEs mapped to this weakness (3,621)

page 3 of 182
  • CVE-2026-69502CriAug 21, 2026
    Microsoft
    Azure SQL Database
    risk 0.65cvss 10.0epss 0.01

    Server-side request forgery (ssrf) in Azure SQL Database allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-65801CriAug 20, 2026
    Microsoft
    Exchange Online
    risk 0.65cvss 10.0epss 0.01

    Server-side request forgery (ssrf) in Microsoft Exchange Online allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-48331CriAug 3, 2026
    Adobe Inc.
    Campaign
    risk 0.65cvss 10.0epss 0.00

    Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

  • CVE-2026-47938CriJun 9, 2026
    Adobe Inc.
    Campaign
    risk 0.65cvss 10.0epss 0.00

    Adobe Campaign Classic (ACC) versions 7.4.3 build 9394 and earlier are affected by a Server-Side Request Forgery (SSRF) vulnerability that could result in privilege escalation. Exploitation of this issue does not require user interaction. Scope is changed.

  • CVE-2026-33712CriMay 22, 2026
    Typebot
    Typebot
    risk 0.65cvss 10.0epss 0.00

    Typebot is a chatbot builder tool. In versions 3.15.2 and prior, the preview chat endpoint (POST /api/v1/typebots/{typebotId}/preview/startChat) allows unauthenticated users to achieve Server-Side Request Forgery (SSRF) by supplying a custom typebot definition with server-side…

  • CVE-2026-35431CriApr 23, 2026
    Microsoft
    Entra ID
    risk 0.65cvss 10.0epss 0.01

    Server-side request forgery (ssrf) in Microsoft Entra ID Entitlement Management allows an unauthorized attacker to perform spoofing over a network.

  • CVE-2026-32186CriApr 3, 2026
    Microsoft
    Bing
    risk 0.65cvss 10.0epss 0.01

    Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-33107CriApr 3, 2026
    Azure
    Databricks
    risk 0.65cvss 10.0epss 0.01

    Server-side request forgery (ssrf) in Azure Databricks allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2026-32169CriMar 19, 2026
    Microsoft
    Azure Cloud Shell
    risk 0.65cvss 10.0epss 0.01

    Server-side request forgery (ssrf) in Azure Cloud Shell allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2025-64180CriNov 7, 2025
    Manager Io
    Manager
    risk 0.65cvss 10.0epss 0.00

    Manager-io/Manager is accounting software. In Manager Desktop and Server versions 25.11.1.3085 and below, a critical vulnerability permits unauthorized access to internal network resources. The flaw lies in the fundamental design of the DNS validation mechanism. A Time-of-Check…

  • CVE-2025-59503CriOct 23, 2025
    Microsoft
    Azure Compute Gallery
    risk 0.65cvss 10.0epss 0.01

    Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.

  • CVE-2025-53767CriAug 7, 2025
    Microsoft
    Azure Openai
    risk 0.65cvss 10.0epss 0.01

    Azure OpenAI Elevation of Privilege Vulnerability

  • CVE-2025-29972CriMay 8, 2025
    Microsoft
    Azure Storage Resource Provider
    risk 0.65cvss 9.9epss 0.03

    Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.

  • CVE-2023-39967CriSep 6, 2023
    Wiremock
    Studio
    risk 0.65cvss 10.0epss 0.01

    WireMock is a tool for mocking HTTP services. When certain request URLs like “@127.0.0.1:1234" are used in WireMock Studio configuration fields, the request might be forwarded to an arbitrary service reachable from WireMock’s instance. There are 3 identified potential attack…

  • CVE-2023-23560CriJan 23, 2023
    Lexmark
    Lexmark products
    risk 0.65cvss 9.8epss 0.14

    In certain Lexmark products through 2023-01-12, SSRF can occur because of a lack of input validation.

  • CVE-2022-32995CriJun 27, 2022
    Halo CMS
    Halo CMS
    risk 0.65cvss 9.8epss 0.18

    Halo CMS v1.5.3 was discovered to contain a Server-Side Request Forgery (SSRF) via the template remote download function.

  • CVE-2021-41403CriJun 15, 2022
    Flatcore
    Flatcore CMS
    risk 0.65cvss 9.8epss 0.19

    flatCore-CMS version 2.0.8 calls dangerous functions, causing server-side request forgery vulnerabilities.

  • CVE-2022-21215CriFeb 18, 2022
    Mimosa Networks
    MMP
    risk 0.65cvss 10.0epss 0.01

    This vulnerability could allow an attacker to force the server to create and execute a web request granting access to backend APIs that are only accessible to the Mimosa MMP server, or request pages that could perform some actions themselves. The attacker could force the server…

  • CVE-2021-32682CriJun 14, 2021
    Studio 42
    Elfinder
    risk 0.65cvss 9.8epss 0.70

    elFinder is an open-source file manager for web, written in JavaScript using jQuery UI. Several vulnerabilities affect elFinder 2.1.58. These vulnerabilities can allow an attacker to execute arbitrary code and commands on the server hosting the elFinder PHP connector, even with…

  • CVE-2021-27329CriFeb 18, 2021
    Friendica
    Friendica
    risk 0.65cvss 10.0epss 0.02

    Friendica 2021.01 allows SSRF via parse_url?binurl= for DNS lookups or HTTP requests to arbitrary domain names.