9859 matches found
CVE-2025-27907 IBM WebSphere Application Server server-side request forgery
IBM WebSphere Application Server 8.5 and 9.0 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2025-27907
Summary of evidence for CVE-2025-27907: IBM WebSphere Application Server (WAS) versions 8.5 and 9.0 are vulnerable to server-side request forgery (SSRF), potentially allowing an authenticated attacker to send unauthorized requests from the WAS host, enabling network enumeration or related attacks...
CVE-2025-2987
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2025-2987
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
PT-2025-17551 · Ibm · Ibm Websphere Application Server
Name of the Vulnerable Software and Affected Versions: IBM WebSphere Application Server versions 8.5 through 9.0 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. It is...
CVE-2025-2987 IBM Maximo Asset Management server-side request forgery
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
CVE-2025-2987
IBM Maximo Asset Management 7.6.1.3 is vulnerable to Server-Side Request Forgery (SSRF). An authenticated attacker may cause the system to issue unauthorized requests, potentially enabling network enumeration or other attacks. The IBM security bulletin assigns CVE-2025-2987 with a CVSS v3.1 base ...
CVE-2025-2987 IBM Maximo Asset Management server-side request forgery
IBM Maximo Asset Management 7.6.1.3 is vulnerable to server-side request forgery SSRF. This may allow an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks...
PT-2025-17470 · Ibm · Ibm Maximo Asset Management
Name of the Vulnerable Software and Affected Versions: IBM Maximo Asset Management version 7.6.1.3 Description: The issue allows an authenticated attacker to send unauthorized requests from the system, potentially leading to network enumeration or facilitating other attacks. This is due to a...
PT-2025-17455 · Unknown · Open-Webui
Name of the Vulnerable Software and Affected Versions: open-webui version 0.5.16 Description: The issue concerns a Server-Side Request Forgery SSRF vulnerability. It is located in the routers/ollama.py file, specifically in the verify connection function. Recommendations: For open-webui version...
CVE-2025-29446
CVE-2025-29446 is associated with Open WebUI 0.5.16, where the SSRF vulnerability resides in routers/ollama.py, function verify_connection. Red Hat’s advisory and Snyk report confirm a Server-Side Request Forgery vulnerability affecting this version and advise upgrading to Open WebUI >= 0.6.34...
CVE-2025-28197
Crawl4AI =0.4.247 is vulnerable to SSRF in /crawl4ai/asyncdispatcher.py...
CVE-2025-3787
A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...
CVE-2025-3787
CVE-2025-3787 affects PbootCMS 3.2.5, specifically the Image Handler component. The weakness allows server-side request forgery via manipulation of the Image Handler, with remote exploitability and public disclosure noted across multiple sources. Reports describe an unknown function as the entry ...
CVE-2025-3787 PbootCMS Image server-side request forgery
A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...
CVE-2025-3787 PbootCMS Image server-side request forgery
A vulnerability was found in PbootCMS 3.2.5. It has been classified as problematic. Affected is an unknown function of the component Image Handler. The manipulation leads to server-side request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and...
PT-2025-17342
Name of the Vulnerable Software and Affected Versions Crawl4AI versions 0.4.247 and earlier Description The issue concerns a Server-Side Request Forgery SSRF vulnerability. It is located in the /crawl4ai/async dispatcher.py file. Recommendations For versions 0.4.247 and earlier, update to a versi...
PT-2025-17291 · Pbootcms · Pbootcms
Name of the Vulnerable Software and Affected Versions: PbootCMS version 3.2.5 Description: A vulnerability was found in the Image Handler component, which can lead to server-side request forgery. The manipulation can be launched remotely. Recommendations: For PbootCMS version 3.2.5, consider...
CVE-2025-29457
An issue in MyBB 1.8.38 allows a remote attacker to obtain sensitive information via the Import a Theme function. NOTE: the Supplier disputes this because of the allowed actions of Board administrators and because of SSRF mitigation...
CVE-2025-31497
TEIGarage is a webservice and RESTful service to transform, convert and validate various formats, focussing on the TEI format. The Document Conversion Service contains a critical XML External Entity XXE Injection vulnerability in its document conversion functionality. The service processes XML...