CWE-918: Server-Side Request Forgery
The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
Also known as XSPA, SSRF.
A kind of CWE-441 Unintended Proxy or Intermediary.
From the CWE List. © The MITRE Corporation.
Newest
- openidentityplatform openam OpenAM before 16.1.4 SSRF and CRL Tampering via Certificate CRL Distribution Point 6.3 Medium
- openidentityplatform openam OpenAM before 16.1.4 SSRF via UMA Scope Description URLs 5.3 Medium
- openidentityplatform openam OpenAM before 16.1.4 SSRF via Federation Configuration Wizard Metadata URLs 5.1 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.2 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 3.8 Low
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.3 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.8 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.7 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.6 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.2 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.6 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.3 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.2 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.3 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.2 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.8 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.0 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.8 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.5 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 5.0 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.6 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.9 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 9.6 Critical
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.7 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 8.5 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.7 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 7.7 High
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- ibm api connect Multiple Vulnerabilities in IBM API Connect 6.4 Medium
- Show olderLoading…