Vulnerabilities > Server-Side Request Forgery (SSRF)

DATE CVE VULNERABILITY TITLE RISK
2022-08-01 CVE-2022-31188 Server-Side Request Forgery (SSRF) vulnerability in Cvat
CVAT is an opensource interactive video and image annotation tool for computer vision.
network
low complexity
cvat CWE-918
critical
9.8
2022-08-01 CVE-2022-31776 Server-Side Request Forgery (SSRF) vulnerability in IBM Datapower Gateway
IBM DataPower Gateway 10.0.2.0 through 10.0.4.0, 10.0.1.0 through 10.0.1.8, 10.5.0.0, and 2018.4.1.0 through 2018.4.1.21 is vulnerable to server-side request forgery (SSRF).
network
low complexity
ibm CWE-918
8.8
2022-07-28 CVE-2022-36997 Server-Side Request Forgery (SSRF) vulnerability in Veritas products
An issue was discovered in Veritas NetBackup 8.1.x through 8.1.2, 8.2, 8.3.x through 8.3.0.2, 9.x through 9.0.0.1, and 9.1.x through 9.1.0.1 (and related NetBackup products).
network
low complexity
veritas CWE-918
8.8
2022-07-26 CVE-2021-43959 Server-Side Request Forgery (SSRF) vulnerability in Atlassian Jira Service Desk and Jira Service Management
Affected versions of Atlassian Jira Service Management Server and Data Center allow authenticated remote attackers to access the content of internal network resources via a Server-Side Request Forgery (SSRF) vulnerability in the CSV importing feature of JSM Insight.
network
low complexity
atlassian CWE-918
5.7
2022-07-19 CVE-2022-22416 Server-Side Request Forgery (SSRF) vulnerability in IBM products
IBM Sterling Partner Engagement Manager 6.1.2, 6.2, and Cloud/SasS 22.2 is vulnerable to server-side request forgery (SSRF).
network
low complexity
ibm CWE-918
5.4
2022-07-14 CVE-2022-25800 Server-Side Request Forgery (SSRF) vulnerability in Bestpractical Request Tracker for Incident Response
Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via the whois lookup tool.
network
low complexity
bestpractical CWE-918
critical
9.1
2022-07-14 CVE-2022-25801 Server-Side Request Forgery (SSRF) vulnerability in Bestpractical Request Tracker for Incident Response
Best Practical RT for Incident Response (RTIR) before 4.0.3 and 5.x before 5.0.3 allows SSRF via Scripted Action tools.
network
low complexity
bestpractical CWE-918
critical
9.1
2022-07-13 CVE-2022-22982 Server-Side Request Forgery (SSRF) vulnerability in VMWare Vcenter Server 6.5/6.7/7.0
The vCenter Server contains a server-side request forgery (SSRF) vulnerability.
network
low complexity
vmware CWE-918
7.5
2022-07-01 CVE-2022-25876 Server-Side Request Forgery (SSRF) vulnerability in Link-Preview-Js Project Link-Preview-Js
The package link-preview-js before 2.1.16 are vulnerable to Server-side Request Forgery (SSRF) which allows attackers to send arbitrary requests to the local network and read the response.
local
low complexity
link-preview-js-project CWE-918
5.5
2022-06-30 CVE-2022-26135 Server-Side Request Forgery (SSRF) vulnerability in Atlassian products
A vulnerability in Mobile Plugin for Jira Data Center and Server allows a remote, authenticated user (including a user who joined via the sign-up feature) to perform a full read server-side request forgery via a batch endpoint.
network
low complexity
atlassian CWE-918
6.5