{"id":"CVE-2025-27217","aliases":["EUVD-2025-25440","GHSA-2789-ggx9-w3cc"],"status":"published","title":"A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with...","description":"A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.","severity":{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-10","score":0.004,"percentile":0.3454,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-918"],"published":"2025-08-21T00:01:24Z","modified":"2026-06-17T09:03:13Z","products":[{"vendor":"ubiquiti inc","product":"uisp application"}],"references":[{"url":"https://community.ui.com/releases/UISP-Application-2-4-220/b428b276-c4a6-4b90-b97b-1860ff2bb46d"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-27217"},{"url":"https://github.com/advisories/GHSA-2789-ggx9-w3cc"}],"sources":{"cve":[{"id":"CVE-2025-27217","description":"A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.","status":"published","published":"2025-08-21T00:01:24.159Z","modified":"2025-08-21T14:47:06.36Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"adp"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:32:42.411662Z"}],"euvd":[{"id":"EUVD-2025-25440","description":"A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.","status":"published","published":"2025-08-21T00:01:24Z","modified":"2025-08-21T14:47:06Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T20:31:55.037702Z"}],"ghsa":[{"id":"GHSA-2789-ggx9-w3cc","title":"A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with...","description":"A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.","status":"published","published":"2025-08-21T03:30:25Z","modified":"2025-08-21T15:31:38Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T15:03:22.079982Z"}],"nvd":[{"id":"CVE-2025-27217","description":"A Server-Side Request Forgery (SSRF) in the UISP Application may allow a malicious actor with certain permissions to make requests outside of UISP Application scope.","status":"published","published":"2025-08-21T01:15:36.02Z","modified":"2026-06-17T09:03:13.87Z","cvss":[{"version":"3.1","score":9.1,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-918"],"updated_at":"2026-11-02T14:11:25.261243Z"}]}}