CVE-2022-25026: Rocketsoftware Trufusion Enterprise

High severity, CVSS 7.5. EPSS: 24.2% chance of exploitation in the next 30 days.

A Server-Side Request Forgery (SSRF) in Rocket TRUfusion Portal v7.9.2.1 allows remote attackers to gain access to sensitive resources on the internal network via a crafted HTTP request to /trufusionPortal/upDwModuleProxy.

Affected products

• Rocketsoftware Trufusion Enterprise: before 7.9.5.1 (fixed in 7.9.5.1)

Published 2023-01-12. Last modified 2026-06-17.