CVE-2017-7553

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)...

6.3 Medium

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF). An attacker could use this flaw to probe the network internal resources, and access restricted endpoints.

Attack profile

How easy it is to exploit

Attack vector: Network
Complexity: Low
Privileges needed: Low
User interaction: None

What an attacker can affect

Confidentiality: Low
Integrity: Low
Availability: Low

Exploit likelihood

0.70%Down 0.1 points since Apr 14, 2021

What each source reports

NVD Score used 6.3

Record: CVE-2017-7553
CVSS 3.0: 6.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
CVSS 2.0: 6.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:P
Weakness: CWE-918
Updated: 2026-11-02

CVE List No score

Record: CVE-2017-7553
Updated: 2026-11-02

EUVDEUVD-2017-16561 No score

Record: EUVD-2017-16561
Updated: 2026-11-03

GitHub AdvisoriesGHSA-rmmq-9vg2-553m 6.3

The external_request api call in App Studio (millicore) allows server side request forgery (SSRF)...

Record: GHSA-rmmq-9vg2-553m
CVSS 3.0: 6.3 MediumCVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Weakness: CWE-918
Updated: 2026-11-02

OSVRHSA-2017:2674 7.5

Red Hat Security Advisory: Red Hat Mobile Application Platform security update

Record: RHSA-2017:2674
CVSS 3.0: 7.5 HighCVSS:3.0/AV:A/AC:H/PR:H/UI:N/S:C/C:H/I:L/A:H
Updated: 2026-11-02

Affected products

redhat mobile application platform

Affected packages

Affected packages
Package	Affected	Fixed
`fh-system-dump-tool` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.0.0-5.el7	0:1.0.0-5.el7
`fping` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.10-4.el7map	0:3.10-4.el7map
`fping-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.10-4.el7map	0:3.10-4.el7map
`nagios` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-common` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-devel` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.0.8-8.el7map	0:4.0.8-8.el7map
`nagios-plugins` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-all` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-apt` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map

Show 77 moreShow less

Affected packages
Package	Affected	Fixed
`nagios-plugins-breeze` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-by_ssh` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-cluster` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dbi` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dhcp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dig` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-disk` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-disk_smb` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dns` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-dummy` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-file_age` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-flexlm` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-fping` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-game` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-hpjd` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-http` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-icmp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ide_smart` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ifoperstatus` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ifstatus` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ircd` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ldap` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-load` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-log` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mailq` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mrtg` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mrtgtraf` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-mysql` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-nagios` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-nt` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ntp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ntp-perl` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-nwstat` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-oracle` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-overcr` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-perl` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-pgsql` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ping` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-procs` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-radius` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-real` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-rpc` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-sensors` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-smtp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-snmp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ssh` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-swap` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-tcp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-time` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-ups` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-uptime` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-users` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`nagios-plugins-wave` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.0.3-3.el7map	0:2.0.3-3.el7map
`perl-Crypt-CBC` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.33-2.el7map	0:2.33-2.el7map
`perl-Crypt-DES` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.05-20.el7map	0:2.05-20.el7map
`perl-Crypt-DES-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.05-20.el7map	0:2.05-20.el7map
`perl-Net-SNMP` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:6.0.1-7.el7map	0:6.0.1-7.el7map
`phantomjs` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.9.7-3.el7map	0:1.9.7-3.el7map
`phantomjs-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.9.7-3.el7map	0:1.9.7-3.el7map
`python-meld3` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.6.10-1.el7map	0:0.6.10-1.el7map
`python-meld3-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.6.10-1.el7map	0:0.6.10-1.el7map
`qstat` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.11-13.20080912svn311.el7map	0:2.11-13.20080912svn311.el7map
`qstat-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.11-13.20080912svn311.el7map	0:2.11-13.20080912svn311.el7map
`radiusclient-ng` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`radiusclient-ng-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`radiusclient-ng-devel` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`radiusclient-ng-utils` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:0.5.6-9.el7map	0:0.5.6-9.el7map
`redis` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.8.21-2.el7map	0:2.8.21-2.el7map
`redis-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.8.21-2.el7map	0:2.8.21-2.el7map
`rhmap-fh-openshift-templates` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:4.5.0-11.el7	0:4.5.0-11.el7
`rhmap-mod_authnz_external` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.3.1-7.el7map	0:3.3.1-7.el7map
`rhmap-mod_authnz_external-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.3.1-7.el7map	0:3.3.1-7.el7map
`sendEmail` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:1.56-2.el7	0:1.56-2.el7
`ssmtp` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.64-14.el7map	0:2.64-14.el7map
`ssmtp-debuginfo` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:2.64-14.el7map	0:2.64-14.el7map
`supervisor` Red Hat:mobile_application_platform:4.5 From an advisory covering 4 CVEs	before 0:3.1.3-3.el7map	0:3.1.3-3.el7map

History

History
Recorded	Changed	Sources
Nov 6, 2026	affected, facts
Nov 3, 2026	aliases	EUVD
Nov 2, 2026	first indexed	CVE List, GitHub Advisories, NVD, OSV

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2017-7553 is a medium vulnerability (CVSS 6.3) in Redhat Mobile Application Platform, published September 28, 2017. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 0.70%, the 53rd percentile. No source names a fixed version.

References

Show 19 moreShow less