Vulnerability index

Browse CVEs

61 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Filtering by weakness Server-Side Request Forgery (SSRF)CWE-918 × clear
Bing HIGH 7.5
CVE-2026-26120

Server-side request forgery (ssrf) in Microsoft Bing allows an unauthorized attacker to perform tampering over a network.

No fix yet
Fix from $1,950 2026-03-19
Azure Mcp Server HIGH 8.8
CVE-2026-26118

Server-side request forgery (ssrf) in Azure MCP Server allows an authorized attacker to elevate privileges over a network.

Fix: 2.0.0+
Fix from $1,950 2026-03-10
Azure Iot Explorer HIGH 7.5
CVE-2026-26121

Server-side request forgery (ssrf) in Azure IoT Explorer allows an unauthorized attacker to perform spoofing over a network.

Fix: 0.15.14+
Fix from $1,950 2026-03-10
Azure Devops Server MEDIUM 6.5
CVE-2026-21512

Server-side request forgery (ssrf) in Azure DevOps Server allows an authorized attacker to perform spoofing over a network.

Fix: 2022.2.0+
Fix from $1,600 2026-02-10
Sharepoint Server MEDIUM 5.4
CVE-2026-20958

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to disclose information over a network.

Fix: 16.0.19127.20442+
Fix from $1,600 2026-01-13
Azure Language HIGH 8.8
CVE-2025-64663

Custom Question Answering Elevation of Privilege Vulnerability

No fix yet
Fix from $1,950 2025-12-18
Azure Monitor CRITICAL 9.8
CVE-2025-62207

Azure Monitor Elevation of Privilege Vulnerability

No fix yet
Fix from $2,300 2025-11-20
Azure Compute Resource Provider CRITICAL 9.8
CVE-2025-59503

Server-side request forgery (ssrf) in Azure Compute Gallery allows an unauthorized attacker to elevate privileges over a network.

Mitigation only
Fix from $2,300 2025-10-23
Sharepoint Server HIGH 7.1
CVE-2025-53760EPSS 12%

Server-side request forgery (ssrf) in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network.

Fix: 16.0.18526.20518+
Fix from $1,950 2025-08-12
Azure Openai CRITICAL 10.0
CVE-2025-53767

Azure OpenAI Elevation of Privilege Vulnerability

No fix yet
Fix from $2,300 2025-08-07
Power Apps HIGH 7.5
CVE-2025-47733

Server-Side Request Forgery (SSRF) in Microsoft Power Apps allows an unauthorized attacker to disclose information over a network

Mitigation only
Fix from $1,950 2025-05-08
Azure Storage Resource Provider CRITICAL 9.8
CVE-2025-29972

Server-side request forgery (ssrf) in Azure Storage Resource Provider allows an authorized attacker to perform spoofing over a network.

Mitigation only
Fix from $2,300 2025-05-08
Azure Health Bot HIGH 8.8
CVE-2025-21384

An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a …

Mitigation only
Fix from $1,950 2025-04-01
Dynamics 365 Sales HIGH 8.8
CVE-2025-21177

Server-side request forgery (ssrf) in Microsoft Dynamics 365 Sales allows an authorized attacker to elevate privileges over a network.

Mitigation only
Fix from $1,950 2025-02-06
Purview MEDIUM 6.5
CVE-2025-21385EPSS 24%

A Server-Side Request Forgery (SSRF) vulnerability in Microsoft Purview allows an authorized attacker to disclose information over a network.

No fix yet
Fix from $1,600 2025-01-09
Groupme CRITICAL 9.8
CVE-2024-38183

An improper access control vulnerability in GroupMe allows an a unauthenticated attacker to elevate privileges over a network.

Patch available
Fix from $2,300 2024-09-17
Azure Health Bot HIGH 8.8
CVE-2024-38109

An authenticated attacker can exploit an Server-Side Request Forgery (SSRF) vulnerability in Microsoft Azure Health Bot to elevate privileges over a …

Patch available
Fix from $1,950 2024-08-13
Copilot Studio MEDIUM 6.5
CVE-2024-38206EPSS 12%

An authenticated attacker can bypass Server-Side Request Forgery (SSRF) protection in Microsoft Copilot Studio to leak sensitive information over a n…

Patch available
Fix from $1,600 2024-08-06
Sharepoint Server HIGH 7.5
CVE-2024-32987

Microsoft SharePoint Server Information Disclosure Vulnerability

Patch available
Fix from $1,950 2024-07-09
Skype For Business Server MEDIUM 5.3
CVE-2023-41763 KEVEPSS 90%

Skype for Business Elevation of Privilege Vulnerability

Patch available
Fix from $1,600 2023-10-10
Power Apps MEDIUM 5.4
CVE-2023-32052

Microsoft Power Apps (online) Spoofing Vulnerability

Fix: 9.2.23042+
Fix from $1,600 2023-07-11
Windows 10 1507 MEDIUM 6.5
CVE-2023-24954

Microsoft SharePoint Server Information Disclosure Vulnerability

Fix: 10.0.10240.19926 / 10.0.14393.5921+
Fix from $1,600 2023-05-09
Sharepoint Foundation HIGH 8.1
CVE-2023-28288EPSS 6%

Microsoft SharePoint Server Spoofing Vulnerability

Patch available
Fix from $1,950 2023-04-11
Exchange Server HIGH 7.5
CVE-2023-21761

Microsoft Exchange Server Information Disclosure Vulnerability

No fix yet
Fix from $1,950 2023-01-10
Exchange Server HIGH 8.8
CVE-2022-41040 KEVEPSS 100%

Microsoft Exchange Server Elevation of Privilege Vulnerability

Patch available
Fix from $1,950 2022-10-03
Exchange Server CRITICAL 9.1
CVE-2021-34473 KEVEPSS 100%

Microsoft Exchange Server Remote Code Execution Vulnerability

Patch available
Fix from $2,300 2021-07-14
Sharepoint Foundation HIGH 7.6
CVE-2021-31950

Microsoft SharePoint Server Spoofing Vulnerability

Patch available
Fix from $1,950 2021-06-08
Exchange Server CRITICAL 9.1
CVE-2021-26855 KEVEPSS 100%

Microsoft Exchange Server Remote Code Execution Vulnerability

Patch available
Fix from $2,300 2021-03-03
Exchange Server HIGH 8.6
CVE-2018-16793EPSS 11%

Rollup 18 for Microsoft Exchange Server 2010 SP3 and previous versions has an SSRF vulnerability via the username parameter in /owa/auth/logon.aspx i…

No fix yet
Fix from $1,950 2018-09-21
Active Directory Federation Services HIGH 8.6
CVE-2018-16794EPSS 8%

Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in…

Fix: after 4.0
Fix from $1,950 2018-09-18