CVE-2019-18355

CRITICAL 9.8CVE-2019-18355 · Published 23/10/2019 · updated 17/06/2026

In short

CVE-2019-18355 is a CRITICAL (CVSS 9.8) vulnerability affecting secret server (thycotic).
Chance of exploitation in the next 30 days (EPSS): 1.5%, higher than 74.6% of all vulnerabilities.
Fix: update to 10.7.000000 or later.

Package	Affected versions	Patched versions
secret server thycotic	`< 10.7.000000`	`10.7.000000`

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.