Weakness class · SSRF

Server-Side Request Forgery

4,095 published CVEs name a weakness in this class; 25 of them are exploited in the wild.

4,095CVEs

25exploited

2CWEs

CWEs in this class2

CWEs of Server-Side Request Forgery, most CVEs first
CWE	Weakness	CVEs	Exploited	Check
CWE-918	Server-Side Request Forgery	3,959	24	143
CWE-610	Externally Controlled Reference to a Resource in Another Sphere	136	1	0

Exploited and check counts are given for the class's largest CWEs; open a CWE for its CVEs.

Data as of 2026-11-14.