Server-Side Request Forgery

Every one of the 91 is a mark on the map. Named now: 1 to 26, most at risk first.

1. Exchange Server - Remote Code ExecutionCVE-2021-34473Microsoft · CVSS 9.1 · 100% likely

   CWE-918APT35

2. Microsoft Exchange Server SSRF VulnerabilityCVE-2021-26855Microsoft · CVSS 9.1 · 100% likely

   CWE-918APT35APT412 bounty reports

3. Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-41040Microsoft · CVSS 8.8 · 100% likely

   CWE-918Ember BearPlay1 bounty report

4. Skype for Business 2019 (SfB) - Blind Server-side Request ForgeryCVE-2023-41763Microsoft · CVSS 5.3 · 90% likely

   CWE-9181 bounty report

5. uniquesig0/InternalSite/InitParams.aspx in Microsoft Forefront Unified Access Gateway 2010 allows remote attackers to trigger outbound DNS queries for arbitrary hosts via a comma-…CVE-2018-12571Microsoft · 30% likely

   CWE-918

6. Microsoft Purview Information Disclosure VulnerabilityCVE-2025-21385Microsoft · CVSS 8.8 · 28% likely

   CWE-918

7. Microsoft SharePoint Elevation of Privilege VulnerabilityCVE-2025-53760Microsoft · CVSS 7.1 · 28% likely

   CWE-918

8. Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2026-45502Microsoft · CVSS 5 · 20% likely

   CWE-918

9. An elevation of privilege vulnerability exists in Windows 10, Windows 8.1, Windows RT 8.1, Windows Server 2012, Windows Server 2012 R2, and Windows Server 2016 versions of Microso…CVE-2017-0211Microsoft Corporation · 14% likely

   CWE-610

10. Microsoft Copilot Studio Information Disclosure VulnerabilityCVE-2024-38206Microsoft · CVSS 8.5 · 12% likely

    CWE-918

11. Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx in the OWA (Outlook Web Access)…CVE-2018-16793Microsoft · 11% likely

    CWE-918

12. Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls.CVE-2018-16794Microsoft · 8.0% likely

    CWE-918

13. Microsoft SharePoint Server Spoofing VulnerabilityCVE-2023-28288Microsoft · CVSS 8.1 · 6.2% likely

    CWE-918

14. Microsoft SharePoint Server Spoofing VulnerabilityCVE-2021-31950Microsoft · CVSS 7.6 · 4.6% likely

    CWE-918

15. Azure Storage Resource Provider Spoofing VulnerabilityCVE-2025-29972Microsoft · CVSS 9.9 · 3.3% likely

    CWE-918

16. Microsoft UFO: IPv6 transition address bypass of SSRF guard in URL validationCVE-2026-73297microsoft · CVSS 6.9 · 2.9% likely

    CWE-918

17. Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2024-32987Microsoft · CVSS 7.5 · 2.3% likely

    CWE-918

18. Microsoft Power Apps Information Disclosure VulnerabilityCVE-2025-47733Microsoft · CVSS 9.1 · 1.8% likely

    CWE-918

19. Azure Health Bot Elevation of Privilege VulnerabilityCVE-2024-38109Microsoft · CVSS 9.1 · 1.8% likely

    CWE-918

20. Microsoft SharePoint Server Information Disclosure VulnerabilityCVE-2023-24954Microsoft · CVSS 6.5 · 1.8% likely

    CWE-918

21. Microsoft Exchange Server Information Disclosure VulnerabilityCVE-2023-21761Microsoft · CVSS 7.5 · 1.7% likely

    CWE-918

22. Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2026-45504Microsoft · CVSS 8.8 · 1.3% likelycovered by CyberSIXT

    CWE-918

23. Azure OpenAI Elevation of Privilege VulnerabilityCVE-2025-53767Microsoft · CVSS 10 · 1.2% likely

    CWE-918

24. Azure IOT Explorer Spoofing VulnerabilityCVE-2026-26121Microsoft · CVSS 7.5 · 1.2% likelycovered by CyberSIXT

    CWE-918

25. Microsoft Dynamics 365 Sales Elevation of Privilege VulnerabilityCVE-2025-21177Microsoft · CVSS 8.7 · 1.1% likely

    CWE-918

26. Azure MCP Server Tools Elevation of Privilege VulnerabilityCVE-2026-26118Microsoft · CVSS 8.8 · 1.1% likelycovered by CyberSIXT

    CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.