U.S. Dept Of Defense · disclosed reports
Server-Side Request Forgery
20 disclosed reports · $5,000 paid · 20 valid
Every dot is a report; the named ones are the most upvoted. Bright dots were paid a bounty. A report opens its page here: our analysis where there is one, and the link to HackerOne. The status is HackerOne's own outcome; "access needed" is only what a title states.
Open U.S. Dept Of Defense on HackerOne- reports
- 20
- valid
- 20
- paid a bounty
- 2
Every one of the 20 is a mark on the map. Named now: 1 to 20, most upvoted first.
- SSRF to read AWS metaData at https://█████/ [HtUS]
- SSRF in Functional Administrative Support Tool pdf generator (████) [HtUS]
- SSRF vulnerability on ██████████ leaks internal IP and various sensitive information
- Unauthenticated Blind SSRF at https://█████ via xmlrpc.php file
- External service interaction ( DNS and HTTP ) in www.████████
- Blind SSRF via image upload URL downloader on https://██████/
- External Service Interaction (HTTP/DNS) on https://www.███ (██████████ parameter)
- Full read SSRF at █████████ [HtUS]
- Server-Side Request Forgery (SSRF)
- SSRF in ███████
- SSRF ACCESS AWS METADATA - █████
- SSRF due to CVE-2021-26855 on ████████
- SSRF on ████████
- SSRF due to CVE-2021-27905 in www.████████
- Limited code execution vulnerability on a DoD website
- WebLogic Server Side Request Forgery
- Server Side Request Forgery (SSRF) vulnerability in a DoD website
- CVE-2021-26855 on ████████ resulting in SSRF
- SSRF in login page using fetch API exposes victims IP address to attacker controled server
- https://████████ Impacted by DNN ImageHandler SSRF
paid a bounty
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data. Use this via MCP