Skip to content
BackEsc
Sign in

CWE-918 · weakness in Server-Side Request Forgery

Server-Side Request Forgery

3,959 CVEs · 24 exploited

Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.

exploited in the wild
24
check available
143
likely to be exploited
47

Every one of the 3,959 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. Ivanti SAML - Server Side Request Forgery (SSRF)CVE-2024-21893Ivanti · CVSS 8.2 · 100% likely

    Ivanti

  2. Apache <= 2.4.48 Mod_Proxy - Server-Side Request ForgeryCVE-2021-40438Apache Software Foundation · CVSS 9 · 100% likely

    Apache

  3. Exchange Server - Remote Code ExecutionCVE-2021-34473Microsoft · CVSS 9.1 · 100% likely

    MicrosoftAPT35

  4. Microsoft Exchange Server SSRF VulnerabilityCVE-2021-26855Microsoft · CVSS 9.1 · 100% likely

    MicrosoftAPT35APT41

  5. Microsoft Exchange Server Elevation of Privilege VulnerabilityCVE-2022-41040Microsoft · CVSS 8.8 · 100% likely

    MicrosoftEmber BearPlay

  6. F5 iControl REST - Remote Command ExecutionCVE-2021-22986F5 · CVSS 9.8 · 100% likely

    F5

  7. VMWare Workspace ONE UEM - Server-Side Request ForgeryCVE-2021-22054Omnissa · CVSS 7.5 · 100% likely

    Omnissa

  8. Adminer <4.7.9 - Server-Side Request ForgeryCVE-2021-21311vrana · CVSS 7.2 · 98% likely

    Vrana

  9. Oracle E-Business Suite - Server-Side Request ForgeryCVE-2025-61884Oracle Corporation · CVSS 7.5 · 96% likely

    Oracle

  10. Zimbra Collaboration Suite < 8.8.15 Patch 7 - Server-Side Request ForgeryCVE-2020-7796Synacor · CVSS 9.8 · 94% likely

    Zimbra

  11. Skype for Business 2019 (SfB) - Blind Server-side Request ForgeryCVE-2023-41763Microsoft · CVSS 5.3 · 90% likely

    Microsoft

  12. Cisco Unified Communications Manager Server-Side Request Forgery VulnerabilityCVE-2026-20230Cisco · CVSS 8.6 · 89% likely

    Cisco

  13. VMware vSphere - Server-Side Request ForgeryCVE-2021-21973VMware · CVSS 5.3 · 88% likely

    VMware

  14. Zimbra Collaboration Suite - SSRFCVE-2019-9621Synacor · CVSS 7.5 · 81% likely

    Zimbra

  15. vRealize Operations Manager API - Server-Side Request ForgeryCVE-2021-21975VMware · CVSS 9.8 · 78% likely

    VMware

  16. The (1) HTTP and (2) FTP coders in ImageMagick before 6.9.3-10 and 7.x before 7.0.1-1 allow remote attackers to conduct server-side request forgery (SSRF) attacks via a crafted im…CVE-2016-3718ImageMagick · CVSS 5.5 · 76% likely

    ImageMagick

  17. GitLab CI Lint API - Server-Side Request ForgeryCVE-2021-22175GitLab · CVSS 6.8 · 53% likely

    GitLab

  18. An issue has been discovered in GitLab CE/EE affecting all versions starting from 10.5 before 14.3.6, all versions starting from 14.4 before 14.4.4, all versions starting from 14.…CVE-2021-39935GitLab · CVSS 6.8 · 36% likely

    GitLab

  19. Plex Media Server < 1.43.3.10861 - Unauthenticated SSRF via Companion Protocol (plex2shell)CVE-2026-96652Plex · CVSS 4.3 · 12% likely

    Plex9 articles4 articles this week: Plex2Shell Flaws Exploited to Hack Internet Facing NAS Devices

  20. Plex Media Server < 1.43.3.10861 - SSRF via TranscoderCVE-2026-96655Plex · CVSS 4.3 · 11% likely

    Plex9 articles4 articles this week: Plex2Shell Flaws Exploited to Hack Internet Facing NAS Devices

  21. MLflow Webhook SSRF - Unauthenticated Full-Read via Redirect BypassCVE-2026-64849mlflow · CVSS 9.3 · 10% likely

    MLflow5 articles

  22. Accellion FTA 9_12_411 and earlier is affected by SSRF via a crafted POST request to wmProgressstat.html. The fixed version is FTA_9_12_416 and later.CVE-2021-27103Accellion · CVSS 9.8 · 8.2% likely

    Accellion

  23. SonicWall SMA1000 WorkPlace - Unauthenticated SSRF to CouchDBCVE-2026-83548SonicWall · CVSS 10 · 8.0% likely

    SonicWall10 articles

  24. SonicWall SMA1000 - Server-Side Request ForgeryCVE-2026-15409SonicWall · CVSS 10 · 6.8% likely

    SonicWallINCUTA05335 articles1 article this week: Kaspersky says Qilin accounted for 15% of ransomware victims

  25. Grafana 3.0.1-7.0.1 - Server-Side Request ForgeryCVE-2020-13379100% likely
  26. Apache OFBiz - Remote Code ExecutionCVE-2024-45507Apache Software Foundation · CVSS 8.8 · 96% likely

    Apache

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-13 · CISA KEV checked 2026-11-14. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.

CyberSIXTSignal over noise
Updated AboutDevelopersSign in