← All weakness types
Server-Side Request Forgery (SSRF)
CWE-9182,769 vulnerabilities are classified as Server-Side Request Forgery (SSRF) (CWE-918). The most exploitable are shown first (by EPSS), each with its CVSS score, exploit-prediction, CISA KEV status, and available fix.
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2024-21893 | High | 8.2 | 100% | KEV + Ransom | - |
| CVE-2021-40438 | Critical | 9.0 | 100% | KEV | Fix |
| CVE-2021-34473 | Critical | 9.1 | 100% | KEV + Ransom | Fix |
| CVE-2021-26855 | Critical | 9.1 | 100% | KEV + Ransom | Fix |
| CVE-2021-21985 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2022-41040 | High | 8.8 | 100% | KEV + Ransom | Fix |
| CVE-2021-22986 | Critical | 9.8 | 100% | KEV + Ransom | Fix |
| CVE-2020-13379 | High | 8.2 | 100% | - | - |
| CVE-2021-22054 | High | 7.5 | 98% | KEV | Fix |
| CVE-2025-61884 | High | 7.5 | 98% | KEV + Ransom | - |
| CVE-2023-51467 | Critical | 9.8 | 96% | - | Fix |
| CVE-2019-8451 | Medium | 6.5 | 94% | - | Fix |
| CVE-2024-45507 | Critical | 9.8 | 93% | - | Fix |
| CVE-2021-27905 | Critical | 9.8 | 93% | - | Fix |
| CVE-2021-21311 | High | 7.2 | 90% | KEV | Fix |
| CVE-2023-41763 | Medium | 5.3 | 90% | KEV | - |
| CVE-2021-21973 | Medium | 5.3 | 88% | KEV | Fix |
| CVE-2020-26948 | Critical | 9.8 | 87% | - | Fix |
| CVE-2019-0227 | High | 7.5 | 87% | - | - |
| CVE-2020-7796 | Critical | 9.8 | 85% | KEV | Fix |
| CVE-2023-49785 | Critical | 9.1 | 83% | - | - |
| CVE-2023-46262 | High | 7.5 | 83% | - | - |
| CVE-2020-26258 | Medium | 6.3 | 82% | - | Fix |
| CVE-2023-48022 | Critical | 9.8 | 82% | - | Fix |
| CVE-2019-9621 | High | 7.5 | 81% | KEV | Fix |
| CVE-2021-21975 | High | 7.5 | 78% | KEV + Ransom | - |
| CVE-2016-3718 | Medium | 5.5 | 77% | KEV | Fix |
| CVE-2018-14728 | Critical | 9.8 | 77% | - | - |
| CVE-2020-24881 | Critical | 9.8 | 73% | - | Fix |
| CVE-2022-1386 | Critical | 9.8 | 72% | - | Fix |
| CVE-2017-9506 | Medium | 6.1 | 72% | - | - |
| CVE-2022-26135 | Medium | 6.5 | 71% | - | Fix |
| CVE-2021-32682 | Critical | 9.8 | 70% | - | Fix |
| CVE-2021-29490 | Medium | 5.8 | 70% | - | Fix |
| CVE-2020-10770 | Medium | 5.3 | 70% | - | Fix |
| CVE-2024-38472 | High | 7.5 | 68% | - | Fix |
| CVE-2023-43795 | High | 8.6 | 68% | - | Fix |
| CVE-2021-33690 | Critical | 9.9 | 68% | - | - |
| CVE-2023-50968 | High | 7.5 | 63% | - | Fix |
| CVE-2025-27817 | High | 7.5 | 62% | - | Fix |
| CVE-2020-6308 | Medium | 5.3 | 62% | - | - |
| CVE-2021-27670 | Critical | 9.8 | 61% | - | - |
| CVE-2023-2249 | High | 8.8 | 61% | - | - |
| CVE-2021-24472 | Critical | 9.8 | 57% | - | Fix |
| CVE-2022-29847 | High | 7.5 | 56% | - | - |
| CVE-2018-5006 | High | 7.5 | 54% | - | - |
| CVE-2021-22175 | Medium | 6.8 | 53% | KEV | Fix |
| CVE-2024-32964 | Critical | 9.0 | 53% | - | Fix |
| CVE-2025-30220 | Critical | 9.9 | 51% | - | Fix |
| CVE-2021-21342 | Medium | 5.3 | 50% | - | Fix |
| CVE-2022-31188 | High | 8.6 | 48% | - | Fix |
| CVE-2021-21349 | Medium | 6.1 | 47% | - | Fix |
| CVE-2024-47008 | High | 7.5 | 47% | - | Fix |
| CVE-2026-33626 | High | 7.5 | 45% | - | Fix |
| CVE-2020-35313 | Critical | 9.8 | 45% | - | - |
| CVE-2023-46229 | High | 8.8 | 45% | - | Fix |
| CVE-2018-15517 | High | 8.6 | 44% | - | - |
| CVE-2018-25031 | Medium | 4.3 | 42% | - | Fix |
| CVE-2026-20230 | High | 8.6 | 42% | KEV | - |
| CVE-2024-27564 | Medium | 5.8 | 41% | - | - |
| CVE-2022-45362 | High | 7.2 | 41% | - | - |
| CVE-2019-16932 | Critical | 10.0 | 39% | - | Fix |
| CVE-2021-26072 | Medium | 4.3 | 39% | - | Fix |
| CVE-2026-44578 | High | 8.6 | 39% | - | Fix |
| CVE-2024-1884 | Medium | 6.5 | 38% | - | Fix |
| CVE-2022-45835 | Medium | 5.8 | 38% | - | - |
| CVE-2024-27098 | Medium | 6.4 | 38% | - | Fix |
| CVE-2024-4325 | High | 8.6 | 37% | - | Fix |
| CVE-2024-6587 | High | 7.5 | 37% | - | - |
| CVE-2023-27159 | High | 7.5 | 36% | - | - |
| CVE-2023-43654 | Critical | 10.0 | 35% | - | Fix |
| CVE-2023-48023 | Critical | 9.1 | 35% | - | - |
| CVE-2024-1021 | Medium | 6.3 | 35% | - | - |
| CVE-2019-18394 | Critical | 9.8 | 32% | - | - |
| CVE-2021-39935 | Medium | 6.8 | 30% | KEV | Fix |
| CVE-2018-12571 | Critical | 9.8 | 30% | - | - |
| CVE-2024-6922 | Unscored | - | 30% | - | - |
| CVE-2018-19571 | High | 7.7 | 28% | - | Fix |
| CVE-2021-22214 | Medium | 6.8 | 28% | - | Fix |
| CVE-2017-9355 | High | 7.4 | 27% | - | - |
| CVE-2019-9827 | Critical | 9.8 | 27% | - | - |
| CVE-2020-28976 | Medium | 5.3 | 26% | - | - |
| CVE-2019-8982 | Critical | 9.6 | 26% | - | - |
| CVE-2021-21287 | High | 7.7 | 25% | - | Fix |
| CVE-2024-7959 | High | 7.7 | 24% | - | - |
| CVE-2025-21385 | High | 8.8 | 24% | - | - |
| CVE-2022-25026 | High | 7.5 | 24% | - | Fix |
| CVE-2024-32965 | High | 8.1 | 24% | - | Fix |
| CVE-2024-20404 | High | 7.2 | 23% | - | Fix |
| CVE-2022-28117 | Medium | 4.9 | 22% | - | - |
| CVE-2026-33340 | Critical | 9.1 | 22% | - | - |
| CVE-2024-45518 | High | 8.8 | 20% | - | Fix |
| CVE-2022-0591 | Critical | 9.1 | 20% | - | Fix |
| CVE-2024-29021 | Critical | 9.0 | 20% | - | - |
| CVE-2022-31827 | Critical | 9.1 | 20% | - | - |
| CVE-2017-3164 | High | 7.5 | 19% | - | - |
| CVE-2021-40822 | High | 7.5 | 19% | - | Fix |
| CVE-2024-54819 | Critical | 9.1 | 18% | - | - |
| CVE-2025-71258 | Medium | 4.3 | 17% | - | - |
| CVE-2021-41403 | Critical | 9.8 | 17% | - | - |
Showing the top 100 of 2,769. Browse all 2,769 in the lookup tool.