CWE-97 · 7 records

Improper Neutralization of Server-Side Includes (SSI) Within a Web Page

CVEs in this class

7 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
40Plan	CVE-2025-35996No exploit	KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Pagekunbus gmbh · revolution pi pictory · CWE-97	High8.5	—	19.4%	May 1, 2025
34Monitor	CVE-2023-53934No exploit	Kentico Xperience <= 12.0.98 GetResource Handler Denial of Servicekentico · xperience · CWE-97 Pre-auth	High8.7	—	0.4%	Dec 18, 2025
31Monitor	CVE-2024-56363No exploit	APTRS has SSTI vulnerabilityaptrs · aptrs · CWE-97 RCE SSTI	High7.8	—	0.3%	Dec 23, 2024
31Monitor	CVE-2025-21103No exploit	Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization ofdell · networker · CWE-97 RCE	High7.8	—	0.2%	Feb 17, 2025
29Monitor	CVE-2024-29686No exploit	Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted pwintercms · winter · CWE-97 RCE SSTI	High7.2	—	1.8%	Mar 29, 2024
28Monitor	CVE-2024-37621No exploit	StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/indestrongshop · strongshop · CWE-97 SSTI	High7.2	—	0.6%	Jun 17, 2024
26Monitor	CVE-2025-36558No exploit	KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Pagekunbus gmbh · revolution pi pictory · CWE-97 Pre-auth	Medium5.1	—	19.8%	May 1, 2025

CVE-2025-35996
40Plan
KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
HighCVSS 8.5No exploitEPSS 19%
kunbus gmbh · revolution pi pictoryMay 1, 2025
CVE-2023-53934
34Monitor
Kentico Xperience <= 12.0.98 GetResource Handler Denial of Service
HighCVSS 8.7No exploitEPSS 0%
- Pre-auth
kentico · xperienceDec 18, 2025
CVE-2024-56363
31Monitor
APTRS has SSTI vulnerability
HighCVSS 7.8No exploitEPSS 0%
- RCE
- SSTI
aptrs · aptrsDec 23, 2024
CVE-2025-21103
31Monitor
Dell NetWorker Management Console, version(s) 19.11 through 19.11.0.3 & Versions prior to 19.10.0.7 contain(s) an improper neutralization of
HighCVSS 7.8No exploitEPSS 0%
- RCE
dell · networkerFeb 17, 2025
CVE-2024-29686
29Monitor
Server-side Template Injection (SSTI) vulnerability in Winter CMS v.1.2.3 allows a remote attacker to execute arbitrary code via a crafted p
HighCVSS 7.2No exploitEPSS 1%
- RCE
- SSTI
wintercms · winterMar 29, 2024
CVE-2024-37621
28Monitor
StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/inde
HighCVSS 7.2No exploitEPSS 0%
- SSTI
strongshop · strongshopJun 17, 2024
CVE-2025-36558
26Monitor
KUNBUS Revolution Pi Improper Neutralization of Server-Side Includes (SSI) Within a Web Page
MediumCVSS 5.1No exploitEPSS 19%
- Pre-auth
kunbus gmbh · revolution pi pictoryMay 1, 2025