CWE-97
7 published CVEs are weaknesses of this kind, as the records or NVD name it.
- 7Published CVEs7 of them scored
- 1Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2023-53934
Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service
Kentico · Xperience
High8.7 - CVE-2025-36558
KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
KUNBUS GmbH · Revolution Pi PiCtory
Medium5.1 - CVE-2025-35996
KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
KUNBUS GmbH · Revolution Pi PiCtory
High8.5 - CVE-2025-21103
Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization of server-side…
Dell · NetWorker Management Console
High7.8 - CVE-2024-56363
APTRS has SSTI vulnerability
APTRS · APTRS
High7.8 - CVE-2024-37621
StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.
Product not named
High7.2 - CVE-2024-29686
Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted payload to the CMS…
Product not named
High7.2