CVE-2019-18355: Thycotic Secret Server

Critical severity, CVSS 9.8. EPSS: 1.5% chance of exploitation in the next 30 days.

An SSRF issue was discovered in the legacy Web launcher in Thycotic Secret Server before 10.7.

Affected products

• Thycotic Secret Server: before 10.7.000000 (fixed in 10.7.000000)

Published 2019-10-23. Last modified 2026-06-17.