Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
veracodeVeracode Vulnerability DatabaseVERACODE:25693
HistoryJun 16, 2020 - 9:19 a.m.

Server-side Request Forgery (SSRF)

2020-06-1609:19:33
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
29

0.002 Low

EPSS

Percentile

53.5%

JSON

batik-svgrasterizer is vulnerable to server side request forgery (SSRF). It is possible as it does not prevent an attacker to make malicious GET requests on behalf of the server through the use of xlink:hrefattributes which allows access to internal resources.

Related

nvd 1
ibm 38
nessus 11
redhatcve 1
debiancve 1
ubuntucve 1
cve 1
suse 2
cvelist 1
prion 1
osv 3
openvas 18
github 1
fedora 15
mageia 1
rosalinux 1
ubuntu 1
gentoo 1
redhat 3
oracle 6
nvd
nvd
CVE-2019-17566
2020-11-12 18:15:12
ibm
ibm
Security Bulletin: WebSphere Application Server shipped with Jazz for Service Management (JazzSM) is vulnerable to CVE-2019-17566
2020-11-10 14:05:35
Security Bulletin: Vulnerability in Apache Batik affects WebSphere Application Server (CVE-2019-17566)
2020-08-25 21:46:45
Security Bulletin: A security vulnerability has been identified in IBM WebSphere Application Server shipped with IBM Business Monitor (CVE-2019-17566)
2020-08-27 07:16:21
nessus
nessus
openSUSE Security Update : xmlgraphics-batik (openSUSE-2020-851)
2020-07-20 00:00:00
IBM WebSphere Application Server 8.0.0.x <= 8.0.0.15 / 8.5.x < 8.5.5.18 / 9.0.x < 9.0.5.5 SSRF (CVE-2019-17566)
2020-10-30 00:00:00
Fedora 32 : 1:ecj / 1:eclipse / 1:eclipse-emf / 2:eclipse-cdt / batik / etc (2020-cf8ef2f333)
2020-09-01 00:00:00
redhatcve
redhatcve
CVE-2019-17566
2020-06-18 15:55:19
debiancve
debiancve
CVE-2019-17566
2020-11-12 18:15:12
ubuntucve
ubuntucve
CVE-2019-17566
2020-11-12 00:00:00
cve
cve
CVE-2019-17566
2020-11-12 18:15:12
suse
suse
Security update for xmlgraphics-batik (moderate)
2020-06-23 00:00:00
Security update for xmlgraphics-batik (moderate)
2020-07-23 00:00:00
cvelist
cvelist
CVE-2019-17566
2020-11-12 00:00:00
prion
prion
Server side request forgery (ssrf)
2020-11-12 18:15:00
osv
osv
CVE-2019-17566
2020-11-12 18:15:12
Server-side request forgery (SSRF) in Apache Batik
2022-02-09 00:46:46
batik vulnerabilities
2023-05-30 14:31:05
openvas
openvas
openSUSE: Security Advisory for xmlgraphics-batik (openSUSE-SU-2020:0851-1)
2020-06-23 00:00:00
Fedora: Security Advisory for eclipse (FEDORA-2020-cf8ef2f333)
2020-09-02 00:00:00
Fedora: Security Advisory for ecj (FEDORA-2020-cf8ef2f333)
2020-09-02 00:00:00
github
github
Server-side request forgery (SSRF) in Apache Batik
2022-02-09 00:46:46
fedora
fedora
[SECURITY] Fedora 32 Update: eclipse-m2e-core-1.16.1-1.fc32
2020-08-31 15:50:29
[SECURITY] Fedora 32 Update: eclipse-mpc-1.8.3-2.fc32
2020-08-31 15:50:29
[SECURITY] Fedora 32 Update: eclipse-ecf-3.14.8-4.fc32
2020-08-31 15:50:28
mageia
mageia
Updated batik packages fix security vulnerabilities
2021-04-02 23:25:05
rosalinux
rosalinux
Advisory ROSA-SA-2023-2239
2023-10-10 08:57:57
ubuntu
ubuntu
Apache Batik vulnerabilities
2023-05-30 00:00:00
gentoo
gentoo
Apache Batik: Multiple Vulnerabilities
2024-01-07 00:00:00
redhat
redhat
(RHSA-2020:4961) Moderate: Red Hat Process Automation Manager 7.9.0 security update
2020-11-05 18:44:42
(RHSA-2020:4960) Moderate: Red Hat Decision Manager 7.9.0 security update
2020-11-05 18:43:06
(RHSA-2020:5568) Important: Red Hat Fuse 7.8.0 release and security update
2020-12-16 12:07:05
oracle
oracle
Oracle Critical Patch Update Advisory - October 2022
2022-10-18 00:00:00
Oracle Critical Patch Update Advisory - January 2021
2021-01-19 00:00:00
Oracle Critical Patch Update Advisory - July 2021
2021-07-20 00:00:00

0.002 Low

EPSS

Percentile

53.5%

JSON
Related for VERACODE:25693
nvd1ibm38nessus11redhatcve1debiancve1ubuntucve1cve1suse2cvelist1prion1osv3openvas18github1fedora15mageia1rosalinux1ubuntu1gentoo1redhat3oracle6