9973 matches found
CVE-2025-25182
Stroom (data processing/storage platform) contains an authentication bypass in versions 7.2-beta.53 and earlier, affecting deployments configured with AWS ALB in a way that the app is not accessed through the ALB. This bypass can enable server-side request forgery and may lead to code execution o...
CVE-2025-25182 Stroom Authentication/Authorization Bypass when using AWS ALB
Stroom is a data processing, storage and analysis platform. A vulnerability exists starting in version 7.2-beta.53 and prior to versions 7.2.24, 7.3-beta.22, 7.4.4, and 7.5-beta.2 that allows authentication bypass to a Stroom system when configured with ALB and installed in a way that the...
CVE-2025-25182 Stroom Authentication/Authorization Bypass when using AWS ALB
Stroom is a data processing, storage and analysis platform. A vulnerability exists starting in version 7.2-beta.53 and prior to versions 7.2.24, 7.3-beta.22, 7.4.4, and 7.5-beta.2 that allows authentication bypass to a Stroom system when configured with ALB and installed in a way that the...
CVE-2025-26494
Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...
CVE-2025-26494 Server Side Request Forgery vulnerability in Tableau Server
Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...
CVE-2025-26494 Server Side Request Forgery vulnerability in Tableau Server
Server-Side Request Forgery SSRF vulnerability in Salesforce Tableau Server allows Authentication Bypass.This issue affects Tableau Server: from 2023.3 through 2023.3.5...
CVE-2025-26494
CVE-2025-26494 is a Server-Side Request Forgery (SSRF) vulnerability in Salesforce Tableau Server that enables authentication bypass on Tableau Server versions 2023.3 through 2023.3.5. The connected sources corroborate the SSRF and the affected range; Red Hat and PT-Security entries provide concr...
CVE-2025-22399
Dell UCC Edge 2.3.0 is affected by a Blind SSRF in the Add Customer SFTP Server component. The vulnerability allows an unauthenticated, locally located attacker to trigger server-side requests, impacting confidentiality, integrity, and availability as indicated by CVSS metrics (high impact, local...
CVE-2025-22399
Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2025-22399
Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery...
CVE-2025-26491
Rejected reason: This CVE ID is a duplicate of CVE-2025-26494...
CVE-2025-26491
CVE-2025-26491 is a duplicate of CVE-2025-26494 (per the initial description). Connected documents provide concrete details for CVE-2025-26494: a Server-Side Request Forgery (SSRF) vulnerability that allows authentication bypass in Tableau Server, affecting versions 2023.3 through 2023.3.5. The s...
CVE-2024-52606
SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request...
CVE-2024-52606 SolarWinds Platform Server-Side Request Forgery Vulnerability
SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request...
CVE-2024-52606 SolarWinds Platform Server-Side Request Forgery Vulnerability
SolarWinds Platform is affected by server-side request forgery vulnerability. Proper input sanitation was not applied allowing for the possibility of a malicious web request...
CVE-2024-52606
CVE-2024-52606 – SolarWinds Platform SSRF : A server-side request forgery vulnerability exists due to insufficient input sanitation in SolarWinds Platform. Public sources in connected documents describe the flaw affecting SolarWinds Platform and indicate an SSRF condition that could allow a malic...
GHSA-VQ52-99R9-H5PW Server-side Request Forgery (SSRF) in hackney
Versions of the package hackney from 0.0.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney will...
CVE-2025-1211
Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery SSRF due to improper parsing of URLs by URI built-in module and hackey. Given the URL http://[email protected]/, the URI function will parse and see the host as 127.0.0.1 which is correct, and hackney...