CVE Vulnerability Advisory Database

[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861

[Impact] Authenticated attackers can bypass network restrictions to access internal resources or perform unauthorized external requests.

[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.

[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861.

[Impact] Authenticated attackers with a valid X-Plex-Token can force the server to perform unauthorized HTTP POST requests to arbitrary internal or external destinations.

[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive internal resources, and perform unauthorized administrative operations, potentially leading to full system compromise

[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the Work Place interface

[Affected Scope] MLflow versions from 3.3.0 prior to 3.15.0

[Impact] Unauthenticated attackers can bypass URL validation to access internal network resources or cloud metadata services, potentially retrieving sensitive credentials and response data.

[Mitigation] Immediately upgrade MLflow to version 3.15.0 or later, and restrict access to the webhook test endpoint in the interim.

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE

[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface

[Affected Scope] Kestra open-source versions prior to 1.0.45 and 1.3.21

[Impact] Unauthenticated remote attackers can bypass authentication filters to create and execute arbitrary workflows, leading to Remote Code Execution (RCE) as root inside the worker container

[Mitigation] Immediately upgrade Kestra to version 1.0.45, 1.3.21, or higher

[Affected Scope] Cisco Unified Communications Manager (Unified CM) and Session Management Edition (Unified CM SME) with WebDialer service enabled

[Impact] Unauthenticated remote attackers can perform SSRF, write arbitrary files to the underlying OS, and subsequently escalate privileges to root

[Mitigation] Apply official Cisco security patches immediately, or disable the WebDialer service as a temporary workaround

[Affected Scope] Oracle E-Business Suite versions 12.2.3 through 12.2.14, specifically the Oracle Configurator (Runtime UI) component.

[Impact] Unauthenticated remote attackers can exploit this vulnerability via HTTP to gain unauthorized access to critical data or compromise the entire Oracle Configurator data.

[Mitigation] Apply the official Oracle Critical Patch Update (CPU) immediately and restrict external HTTP/HTTPS access to the affected endpoints.

[Affected Scope] Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x), and Ivanti Neurons for ZTA

[Impact] Unauthenticated remote attackers can exploit the SAML component to bypass authentication and access restricted internal resources

[Mitigation] Immediately apply the official vendor security patches or import the temporary mitigation XML profile

[Affected Scope] On-premises deployments of Microsoft Skype for Business Server 2015 and 2019

[Impact] Unauthenticated remote attackers can send specially crafted HTTP requests to perform Server-Side Request Forgery (SSRF), accessing internal network resources and exposing sensitive information

[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) patches and restrict outbound traffic from the application servers

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 On-Premises environments

[Impact] Authenticated attackers can exploit this SSRF vulnerability to access backend APIs, leading to Remote Code Execution (RCE) and complete system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement IIS URL Rewrite rules as a temporary workaround

[Affected Scope] VMware Workspace ONE UEM console versions 20.0.8 (prior to 20.0.8.37), 20.11.0 (prior to 20.11.0.40), 21.2.0 (prior to 21.2.0.27), and 21.5.0 (prior to 21.5.0.37).

[Impact] An unauthenticated remote attacker with network access to the UEM console can send crafted requests to access sensitive internal resources and information.

[Mitigation] Apply the official cumulative patches immediately or implement IIS URL Rewrite rules to block external access to the vulnerable endpoints.

[Affected Scope] GitLab CE/EE versions 10.5 before 14.3.6, 14.4 before 14.4.4, and 14.5 before 14.5.2

[Impact] Unauthorized external attackers can perform Server-Side Request Forgery (SSRF) via the CI Lint API to access internal network resources and extract sensitive data

[Mitigation] Immediately upgrade GitLab instances to patched versions (14.3.6, 14.4.4, 14.5.2 or later) and restrict external access to the CI Lint API

[Affected Scope] Apache HTTP Server versions 2.4.48 and earlier with mod_proxy enabled

[Impact] Unauthenticated remote attackers can craft malicious URI paths to force mod_proxy to forward requests to an arbitrary origin server, leading to SSRF

[Mitigation] Immediately upgrade Apache HTTP Server to version 2.4.49 or later, or apply strict RewriteRules to block malicious proxy requests

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 on-premises deployments

[Impact] Unauthenticated attackers can bypass security controls to execute arbitrary PowerShell commands with SYSTEM privileges

[Mitigation] Immediately apply the official Microsoft Cumulative Updates (CU) and Security Updates (SU), and restrict external access to Exchange management ports

[Affected Scope] All GitLab versions starting from 10.5 where internal network requests for webhooks are enabled

[Impact] Unauthenticated attackers can bypass registration restrictions to trigger SSRF, accessing sensitive internal network resources and metadata

[Mitigation] Upgrade to the latest patched GitLab version immediately, or disable the 'Allow requests to the local network from web hooks and services' setting

[Affected Scope] VMware vCenter Server versions 6.5, 6.7, and 7.0 with the default-enabled Virtual SAN Health Check plug-in

[Impact] An unauthenticated attacker with network access to port 443 can execute arbitrary commands with root privileges on the underlying operating system

[Mitigation] Apply official security patches immediately, or disable the vulnerable vSAN Health Check plug-in as a temporary workaround

[Affected Scope] VMware vRealize Operations Manager API prior to version 8.4

[Impact] Unauthenticated network-adjacent or remote attackers can perform SSRF attacks to steal administrative credentials and compromise internal infrastructure

[Mitigation] Apply official security patches immediately or implement temporary API endpoint access restrictions

[Affected Scope] F5 BIG-IP (16.0.x, 15.1.x, 14.1.x, 13.1.x, 12.1.x) and BIG-IQ (7.1.0.x, 7.0.0.x) management interfaces running iControl REST.

[Impact] Unauthenticated remote attackers can execute arbitrary system commands with elevated privileges, leading to complete compromise of the target device.

[Mitigation] Immediately upgrade to the patched versions provided by F5 and restrict access to the iControl REST interface (TCP 443) from untrusted networks.

[Affected Scope] On-premises Microsoft Exchange Server 2013, 2016, and 2019

[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive mailbox data, and chain with other vulnerabilities to execute arbitrary code (RCE)

[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) and Security Update (SU), or implement IIS URL Rewrite rules to block malicious requests