Approved changes feed: RSS · Atom

cpe:2.3:a:foxit_software_inc.:foxit_pdf_services_api:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorFoxit Software Inc. (88a0c639-d166-5809-a889-fe5f837d56d3)
ProductFoxit Pdf Services Api (5fe542e6-eb39-5db8-9119-919ec238f2fa)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-18597 vulnerable 2026-09-16 04:34:02.180122 Blind SSRF on Foxit PDF Services API
HIGH (8.5)
The PDF creation feature of Foxit PDF Services API supports referencing external files. Although local file access is restricted, an attacker could trigger an SSRF vulnerability by using URL redirection to bypass validation, leading to information disclosure.
Published: 2026-08-06T07:37:34.679Z
Updated: 2026-08-06T12:30:12.590Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5936 vulnerable 2026-06-08 08:07:04.275856 Server-Side Request Forgery (SSRF) via URL Parameter in Foxit PDF Services API
HIGH (8.5)
An attacker can control a server-side HTTP request by supplying a crafted URL, causing the server to initiate requests to arbitrary destinations. This behavior may be exploited to probe internal network services, access otherwise unreachable endpoints (e.g., cloud metadata services), or bypass network access controls, potentially leading to sensitive information disclosure and further compromise of the internal environment.
Published: 2026-04-13T06:57:40.220Z
Updated: 2026-04-13T13:50:29.768Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.