| Vulnerability Name |
CVE
CWE
|
CWE |
Severity |
|
Adminer Server Side Request Forgery (SSRF)
|
|
|
Medium
|
|
Apache HTTP Server mod_proxy SSRF (CVE-2021-40438)
|
|
|
High
|
|
Apache mod_jk access control bypass
|
|
|
Medium
|
|
Apache OFBiz SSRF (CVE-2023-50968)
|
|
|
High
|
|
Apache OFBiz SSRF (CVE-2024-45507)
|
|
|
Critical
|
|
Apache Solr SSRF CVE-2017-3164
|
|
|
Medium
|
|
Appwrite favicon SSRF (CVE-2023-27159)
|
|
|
High
|
|
Atlassian OAuth Plugin IconUriServlet SSRF
|
|
|
High
|
|
Auxiliary systems SSRF
|
|
|
High
|
|
ChatGPT-Next-Web SSRF (CVE-2023-49785)
|
|
|
Critical
|
|
Cloud metadata publicly exposed
|
|
|
High
|
|
Edge Side Include injection
|
|
|
High
|
|
Ext JS arbitrary file read
|
|
|
High
|
|
GeoServer SSRF (CVE-2021-40822)
|
|
|
High
|
|
GeoServer WMS SSRF (CVE-2023-43795)
|
|
|
High
|
|
Gitlab CI Lint SSRF
|
|
|
Medium
|
|
Grafana avatar SSRF
|
|
|
High
|
|
Hasura GraphQL API without authentication
|
|
|
Medium
|
|
HTTP/2 pseudo-header server side request forgery
|
|
|
High
|
|
imgproxy SSRF (CVE-2023-30019)
|
|
|
Medium
|
|
Jira Unauthorized SSRF via REST API
|
|
|
High
|
|
Keycloak request_uri SSRF (CVE-2020-10770)
|
|
|
Medium
|
|
Liferay XMLRPC Blind SSRF
|
|
|
Medium
|
|
LLM Server-Side Request Forgery (SSRF)
|
|
|
High
|
|
Microsoft Exchange Server Server-Side Request Forgery (SSRF) vulnerability
|
|
|
High
|
|
Next.js image Blind SSRF
|
|
|
Medium
|
|
Openfire Admin Console Full Read SSRF
|
|
|
High
|
|
Oracle Business Intelligence ReportTemplateService XXE CVE-2019-2616
|
|
|
High
|
|
Oracle E-Business Suite SSRF (CVE-2017-10246)
|
|
|
High
|
|
Oracle E-Business Suite SSRF (CVE-2018-3167)
|
|
|
Medium
|
|
Oracle E-Business Suite SSRF (CVE-2025-61882)
|
|
|
Critical
|
|
Oracle Weblogic T3 XXE (CVE-2019-2647)
|
|
|
High
|
|
Oracle Weblogic T3 XXE (CVE-2019-2888)
|
|
|
High
|
|
Paperclip gem SSRF (Server side request forgery)
|
|
|
High
|
|
Reverse proxy bypass
|
|
|
Medium
|
|
Reverse proxy misrouting
|
|
|
High
|
|
Reverse proxy misrouting through HTTP/2 pseudo-headers (SSRF)
|
|
|
Medium
|
|
SAML Consumer Service External Dereference SSRF
|
|
|
Medium
|
|
SAML Consumer Service XSLT injection
|
|
|
High
|
|
SAP BO BIP SSRF (CVE-2020-6308)
|
|
|
Medium
|
|
SAP NetWeaver ipcpricing server side request forgery
|
|
|
High
|
|
SAP NW DI SSRF vulnerability (CVE-2021-33690)
|
|
|
High
|
|
Server-Side Request Forgery
|
|
|
Critical
|
|
Server-Side Request Forgery (Cloud Metadata)
|
|
|
Critical
|
|
Server-Side Request Forgery (localhost)
|
|
|
High
|
|
Skype for Business SSRF (CVE-2023-41763)
|
|
|
High
|
|
SOAP WS-Addressing SSRF
|
|
|
Medium
|
|
SSRF in Ivanti Connect Secure, Policy Secure and Neurons (CVE-2024-21893)
|
|
|
High
|
|
SSRF in Server-Side Rendering
|
|
|
High
|
|
SSRF via logo_uri in MITREid Connect
|
|
|
High
|
|
TorchServe Management API SSRF (CVE-2023-43654)
|
|
|
Critical
|
|
Unvalidated JWT jku parameter
|
|
|
High
|
|
Unvalidated JWT x5u parameter
|
|
|
High
|
|
VMware vCenter vcavbootstrap Arbitrary File Read
|
|
|
High
|
|
VMware vRealize Operations Server Side Request Forgery (SSRF) vulnerability
|
|
|
High
|
|
WebLogic Server Side Request Forgery
|
|
|
High
|
|
WordPress Plugin All in One Social Lite Server-Side Request Forgery (1.0)
|
|
|
High
|
|
WordPress Plugin Canto Multiple Server-Side Request Forgery Vulnerabilities (1.7.0)
|
|
|
High
|
|
WordPress Plugin Craw Data Server-Side Request Forgery (1.0.0)
|
|
|
High
|
|
WordPress Plugin Dropbox Folder Share Server-Side Request Forgery (1.9.7)
|
|
|
High
|
|
WordPress Plugin Essential Addons for Elementor Server-Side Request Forgery (2.9.8)
|
|
|
High
|
|
WordPress Plugin Flog Server-Side Request Forgery (1.0beta3)
|
|
|
High
|
|
WordPress Plugin Google Forms Server-Side Request Forgery (0.91)
|
|
|
High
|
|
WordPress Plugin Import all XML, CSV & TXT into WordPress Server-Side Request Forgery (6.5.2)
|
|
|
High
|
|
WordPress Plugin Import XML and RSS Feeds Server-Side Request Forgery (2.0.2)
|
|
|
High
|
|
WordPress Plugin jRSS Widget Server-Side Request Forgery (1.2)
|
|
|
High
|
|
WordPress Plugin JSM file_get_contents() Shortcode Server-Side Request Forgery (2.7.0)
|
|
|
High
|
|
WordPress Plugin Like Button Rating-LikeBtn Server-Side Request Forgery (2.6.31)
|
|
|
High
|
|
WordPress Plugin Mapplic-Custom Interactive Map Server-Side Request Forgery (6.1)
|
|
|
High
|
|
WordPress Plugin Mapplic Lite Server-Side Request Forgery (1.0)
|
|
|
High
|
|
WordPress Plugin Nelio AB Testing Server-Side Request Forgery (4.5.10)
|
|
|
High
|
|
WordPress Plugin PhonePe Payment Solutions Server-Side Request Forgery (1.0.15)
|
|
|
High
|
|
WordPress Plugin Popup Builder-Create highly converting, mobile friendly marketing popups Server-Side Request Forgery (4.2.5)
|
|
|
High
|
|
WordPress Plugin Post SMTP-WP SMTP with Email Logs & Mobile App for Failure Alerts-Any SMTP Plus Gmail SMTP, Office 365, Brevo, Mailgun, Amazon SES, Postmark Server-Side Request Forgery (2.1.6)
|
|
|
High
|
|
WordPress Plugin Print My Blog-Print, PDF, & eBook Converter Server-Side Request Forgery (1.6.5)
|
|
|
High
|
|
WordPress Plugin Rank Math SEO-Best SEO For WordPress To Increase Your SEO Traffic Server-Side Request Forgery (1.0.95)
|
|
|
High
|
|
WordPress Plugin RSS Aggregator by Feedzy-Feed to Post, Autoblogging, News & YouTube Video Feeds Aggregator Server-Side Request Forgery (4.4.7)
|
|
|
High
|
|
WordPress Plugin RSVPMaker Server-Side Request Forgery (8.7.2)
|
|
|
High
|
|
WordPress Plugin Telefication Server-Side Request Forgery (1.8.0)
|
|
|
High
|
|
WordPress Plugin W3 Total Cache Server-Side Request Forgery (0.9.7.3)
|
|
|
High
|
|
WordPress Plugin Web Stories Server-Side Request Forgery (1.24.0)
|
|
|
High
|
|
WordPress Plugin Wordpress Picture/Portfolio/Media Gallery Server-Side Request Forgery (3.0.1)
|
|
|
High
|
|
WordPress Plugin WPCafe-Online Food Ordering, Restaurant Menu, Delivery, and Reservations for WooCommerce Server-Side Request Forgery (2.2.23)
|
|
|
High
|
|
WordPress Plugin WP Smart Import: Import any XML File to WordPress Server-Side Request Forgery (1.0.0)
|
|
|
High
|
|
WordPress Plugin WP STAGING WordPress Backup-Migration Backup Restore Server-Side Request Forgery (3.4.3)
|
|
|
High
|
|
WordPress Server-Side Request Forgery (3.7 - 6.1.1)
|
|
|
High
|
|
Zimbra Collaboration Suite SSRF (CVE-2020-7796)
|
|
|
High
|
