Server-Side Request Forgery

Every one of the 15 is a mark on the map. Named now: 1 to 15, most at risk first.

1. In Progress Ipswitch WhatsUp Gold 21.0.0 through 21.1.1, and 22.0.0, it is possible for an unauthenticated attacker to invoke an API transaction that would allow them to relay enc…CVE-2022-29847Progress · 58% likely

   CWE-918

2. In Progress Ipswitch WhatsUp Gold 17.0.0 through 21.1.1, and 22.0.0, it is possible for an authenticated user to invoke an API transaction that would allow them to read sensitive…CVE-2022-29848Progress · 3.8% likely

   CWE-918

3. WhatsUp Gold SessionControler Server-Side Request Forgery Information Disclosure VulnerabilityCVE-2024-5015Progress Software Corporation · CVSS 7.1 · 0.5% likely

   CWE-918

4. WhatsUp Gold GetASPReport Server-Side Request Forgery Information DisclosureCVE-2024-5014Progress Software Corporation · CVSS 7.1 · 0.5% likely

   CWE-918

5. Server-side request forgery and hard-coded key in Progress MarkLogic Server OpsDirectorCVE-2026-85963Progress Software Corporation · CVSS 7.5 · 0.4% likely

   CWE-918

6. WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via FaviconControllerCVE-2024-4561Progress Software Corporation · CVSS 4.2 · 0.4% likely

   CWE-918

7. RadEditor PDF Export SSRF Vulnerability in Telerik UI for ASP.NET AJAXCVE-2026-13192Progress Software · CVSS 6.5 · 0.4% likely

   CWE-918

8. WhatsUp Gold Server-Side Request Forgery Information Disclosure Vulnerability via HttpMonitorSettingsCVE-2024-4562Progress Software Corporation · CVSS 5.4 · 0.4% likely

   CWE-918

9. Server-side request forgery in Progress MarkLogic ServerCVE-2026-9203Progress Software Corporation · CVSS 8.5 · 0.3% likely

   CWE-918

10. External Service Interaction (DNS)CVE-2025-13147Progress · CVSS 5.3 · 0.3% likely

    CWE-918

11. CWE-918: Server-Side Request Forgery in the Progress Sitefinity Next.js Renderer SDKCVE-2026-92931Progress Software · CVSS 8.8 · 0.3% likely

    CWE-918

12. Server-side request forgery in Progress MarkLogic Server Linux cloud deploymentsCVE-2026-85952Progress Software Corporation · CVSS 8.5 · 0.2% likely

    CWE-918

13. Server-side request forgery in Progress MarkLogic Server Azure deploymentsCVE-2026-85951Progress Software Corporation · CVSS 8.5 · 0.2% likely

    CWE-918

14. Unauthenticated queue manipulation through connector SSRF and response injection in Progress ShareFile Storage Zones ControllerCVE-2026-93693Progress · CVSS 6.5 · 0.2% likely

    CWE-918

15. Untrusted request routing and forged acknowledgements permit copy-workflow manipulation in Progress ShareFile Storage Zones ControllerCVE-2026-93694Progress · CVSS 4 · 0.1% likely

    CWE-918

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.