CVE-2025-22374CWE-918

SSRF in CyberAudit-Web videx-legacy-ssl

Medium · published April 10, 2025

CVSS v4.0
6.0
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

A Server-Side Request Forgery (SSRF) vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web, affecting versions prior to 1.1.3. This vulnerability has been patched in versions after 1.1.3. Leaving this vulnerability unpatched could lead to unauthorized access to the underlying infrastructure.

The record
Technical detail
CVSS v4.0
6.0 · MEDIUM
Vector
CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:N/S:N/AU:Y/R:A/V:D/RE:L/U:Green
EPSS
0.00369 · 29.7th percentile
Weakness
CWE-918 · Server-Side Request Forgery (SSRF)
Published
2025-04-10T11:02Z
EPSS history
Timeline
  • 10 APR 11:02Z
    SSRF in CyberAudit-Web videx-legacy-ssl
    cvelistv5