What is CVE-2025-22374?

CVE-2025-22374 is a vulnerability in Videx Inc. Cyberaudit-web, classified under Server-Side Request Forgery (SSRF). Published 2025-04-10.

Is CVE-2025-22374 known to be exploited?

1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

SSRF in Videx Inc. Cyberaudit-web

CVE-2025-22374

A Server-Side Request Forgery (SSRF) vulnerability was discovered in the videx-legacy-ssl web service of Videx’s CyberAudit-Web, affecting versions prior to 1.1.3. This vulnerability has been patched in versions after 1.1.3. Leaving this v…

Vulnerability class: SSRF (Server-Side Request Forgery)

EPSS: 0.003 (22.1th percentile) — read the EPSS interpretation.

Affected products

Videx Inc. Cyberaudit-web — versions <= 1.1.3

Weakness classification (CWE)

CWE-918 — Server-Side Request Forgery (SSRF)

Public proof-of-concept exploits

fkie-cad/nvd-json-data-feeds

References

csirt@divd.nl (third-party-advisory)
csirt@divd.nl (third-party-advisory)

Frequently asked questions

What is CVE-2025-22374?: CVE-2025-22374 is a vulnerability in Videx Inc. Cyberaudit-web, classified under Server-Side Request Forgery (SSRF). Published 2025-04-10.
Is CVE-2025-22374 known to be exploited?: 1 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.