CWE-97 · Command and Code Injection
Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
6CVEs
0exploited
0with a public check
2likely (EPSS 10%+)
SortMost likely exploited
6 CVEs with CWE-97 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-36558KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web PageKUNBUS GmbH · Revolution Pi PiCtory · CVSS 6.1 · 2025-05-01 | 6.1 | 21% | 2025-05-01 |
| CVE-2025-35996KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web PageKUNBUS GmbH · Revolution Pi PiCtory · CVSS 9 · 2025-05-01 | 9.0 | 19% | 2025-05-01 |
| CVE-2024-29686Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS Pages field and Plugi…Wintercms · Winter · CVSS 7.2 · 2024-03-29 | 7.2 | 1.8% | 2024-03-29 |
| CVE-2023-53934Kentico Xperience <= 12.0.98 GetResource Handler Denial of ServiceKentico · Xperience · CVSS 7.5 · 2025-12-18 | 7.5 | 0.4% | 2025-12-18 |
| CVE-2024-56363APTRS has SSTI vulnerabilityAPTRS · APTRS · CVSS 7.8 · 2024-12-23 | 7.8 | 0.3% | 2024-12-23 |
| CVE-2025-21103Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization of server-side vulnerability. An unauthen…Dell · NetWorker Management Console · CVSS 7.8 · 2025-02-17 | 7.8 | 0.2% | 2025-02-17 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.