CVE Vulnerability Advisory Database

[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861

[Impact] Authenticated attackers can bypass network restrictions to access internal resources or perform unauthorized external requests.

[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.

[Affected Scope] All Plex Media Server installations prior to version 1.43.3.10861.

[Impact] Authenticated attackers with a valid X-Plex-Token can force the server to perform unauthorized HTTP POST requests to arbitrary internal or external destinations.

[Mitigation] Immediately update Plex Media Server to version 1.43.3.10861 or later.

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Unauthenticated remote attackers can bypass authentication, access sensitive internal resources, and perform unauthorized administrative operations, potentially leading to full system compromise

[Mitigation] Immediately apply the official firmware patches provided by SonicWall and restrict external access to the Work Place interface

[Affected Scope] MLflow versions from 3.3.0 prior to 3.15.0

[Impact] Unauthenticated attackers can bypass URL validation to access internal network resources or cloud metadata services, potentially retrieving sensitive credentials and response data.

[Mitigation] Immediately upgrade MLflow to version 3.15.0 or later, and restrict access to the webhook test endpoint in the interim.

[Affected Scope] SonicWall SMA1000 Series Appliance Work Place interface

[Impact] Remote unauthenticated attackers can force the appliance to make requests to unintended internal or external locations, potentially leading to internal network compromise or RCE

[Mitigation] Apply the official firmware updates immediately and restrict external access to the management interface

[Affected Scope] Cisco Unified Communications Manager (Unified CM) and Session Management Edition (Unified CM SME) with WebDialer service enabled

[Impact] Unauthenticated remote attackers can perform SSRF, write arbitrary files to the underlying OS, and subsequently escalate privileges to root

[Mitigation] Apply official Cisco security patches immediately, or disable the WebDialer service as a temporary workaround

[Affected Scope] Ivanti Connect Secure (9.x, 22.x), Ivanti Policy Secure (9.x, 22.x), and Ivanti Neurons for ZTA

[Impact] Unauthenticated remote attackers can exploit the SAML component to bypass authentication and access restricted internal resources

[Mitigation] Immediately apply the official vendor security patches or import the temporary mitigation XML profile

[Affected Scope] On-premises deployments of Microsoft Skype for Business Server 2015 and 2019

[Impact] Unauthenticated remote attackers can send specially crafted HTTP requests to perform Server-Side Request Forgery (SSRF), accessing internal network resources and exposing sensitive information

[Mitigation] Immediately apply the official Microsoft Cumulative Update (CU) patches and restrict outbound traffic from the application servers

[Affected Scope] Microsoft Exchange Server 2013, 2016, and 2019 On-Premises environments

[Impact] Authenticated attackers can exploit this SSRF vulnerability to access backend APIs, leading to Remote Code Execution (RCE) and complete system compromise

[Mitigation] Apply the official Microsoft cumulative security updates immediately, or implement IIS URL Rewrite rules as a temporary workaround

[Affected Scope] VMware Workspace ONE UEM console versions 20.0.8 (prior to 20.0.8.37), 20.11.0 (prior to 20.11.0.40), 21.2.0 (prior to 21.2.0.27), and 21.5.0 (prior to 21.5.0.37).

[Impact] An unauthenticated remote attacker with network access to the UEM console can send crafted requests to access sensitive internal resources and information.

[Mitigation] Apply the official cumulative patches immediately or implement IIS URL Rewrite rules to block external access to the vulnerable endpoints.

[Affected Scope] GitLab CE/EE versions 10.5 before 14.3.6, 14.4 before 14.4.4, and 14.5 before 14.5.2

[Impact] Unauthorized external attackers can perform Server-Side Request Forgery (SSRF) via the CI Lint API to access internal network resources and extract sensitive data

[Mitigation] Immediately upgrade GitLab instances to patched versions (14.3.6, 14.4.4, 14.5.2 or later) and restrict external access to the CI Lint API

[Affected Scope] All GitLab versions starting from 10.5 where internal network requests for webhooks are enabled

[Impact] Unauthenticated attackers can bypass registration restrictions to trigger SSRF, accessing sensitive internal network resources and metadata

[Mitigation] Upgrade to the latest patched GitLab version immediately, or disable the 'Allow requests to the local network from web hooks and services' setting

[Affected Scope] Adminer versions 4.0.0 up to (but excluding) 4.7.9, specifically when using the bundled driver package (e.g., adminer.php)

[Impact] Unauthenticated remote attackers can abuse the system to scan internal networks, probe private ports, and access sensitive internal APIs or cloud metadata services (IMDS)

[Mitigation] Immediately upgrade Adminer to version 4.7.9 or higher, and restrict access to the Adminer interface using network-level controls

[Affected Scope] Zimbra Collaboration Suite (ZCS) versions prior to 8.8.15 Patch 7 with WebEx zimlet installed and zimlet JSP enabled

[Impact] Unauthenticated remote attackers can exploit Server-Side Request Forgery (SSRF) to access internal network resources, extract sensitive data, or pivot to further remote code execution (RCE)

[Mitigation] Immediately upgrade Zimbra Collaboration Suite to 8.8.15 Patch 7 or later, or disable and undeploy the unused WebEx zimlet

[Affected Scope] Zimbra Collaboration Suite before 8.6 Patch 13, 8.7.x before 8.7.11 Patch 10, and 8.8.x before 8.8.10 Patch 7 or 8.8.x before 8.8.11 Patch 3

[Impact] Unauthenticated remote attackers can exploit the ProxyServlet to access internal network resources, or chain it with other vulnerabilities (such as XXE) to steal admin credentials and achieve Remote Code Execution (RCE).

[Mitigation] Immediately apply the official security patches corresponding to your Zimbra version and restrict external access to the ProxyServlet endpoint.