CVE-2018-16794
HIGHMicrosoft Active Directory Federation Services < 4.0 - Server-Side Request Forgery via txtBoxEmail Parameter
Title source: llmDescription
Microsoft ADFS 4.0 Windows Server 2016 and previous (Active Directory Federation Services) has an SSRF vulnerability via the txtBoxEmail parameter in /adfs/ls.
References (4)
Core 4
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/105378
Exploit, Mailing List, Third Party Advisory mailing-list
x_refsource_fulldisc
http://seclists.org/fulldisclosure/2018/Sep/13
Exploit, Third Party Advisory, VDB Entry x_refsource_misc
http://packetstormsecurity.com/files/149376/Microsoft-ADFS-4.0-Windows-Server-2016-Server-Side-Request-Forgery.html
Exploit, Mailing List, Third Party Advisory mailing-list
x_refsource_bugtraq
https://seclists.org/bugtraq/2018/Sep/26
Scores
CVSS v3
8.6
EPSS
0.0803
EPSS Percentile
94.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:H/A:N
Details
CWE
CWE-918
Status
published
Products (1)
microsoft/active_directory_federation_services
< 4.0
Published
Sep 18, 2018
Tracked Since
Feb 18, 2026