CVE-2025-22399 HIGH

CVE-2025-22399

Vendor Dell
Product UCC Edge
Weakness CWE-918 · SSRF
Published February 11, 2025
Last update February 12, 2025
View on NVD All CVEs

CVSS base score

7.9/10
Attack vector Local
Attack complexity Low
Privileges required None
User interaction None
Confidentiality None
Integrity High

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:L

What the vulnerability does

01Description

Dell UCC Edge, version 2.3.0, contains a Blind SSRF on Add Customer SFTP Server vulnerability. An unauthenticated attacker with local access could potentially exploit this vulnerability, leading to Server-side request forgery

Key dates

02Disclosure timeline

February 11, 2025 CVE published
February 12, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-69222 LibreChat is vulnerable to Server-Side Request Forgery due to missing restrictions CVE-2026-5346 huimeicloud hm_editor image-to-base64 Endpoint mcp-server.js client.get server-side request forgery CVE-2026-2985 Tiandy Video Surveillance System 视频监控平台 CLSBODownLoad.java downloadImage server-side request forgery CVE-2024-54000 Mobile Security Framework (MobSF) bypass of SSRF fix CVE-2026-43897 Link Preview JS: vunerable to IPv6 and internal loopback attacks