What is the CVSS score of CVE-2025-69299?

CVE-2025-69299 has a CVSS 3.1 base score of 7.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N. EPSS exploitation probability: 0.0%.

Which versions of Laborator Oxygen are affected by CVE-2025-69299?

A Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen versions 6.0.8 and earlier allows attackers to manipulate the server into making unauthorized requests to internal systems,…

How to fix or mitigate CVE-2025-69299?

Within 24 hours: Inventory all Oxygen deployments and confirm versions; isolate or restrict network access to affected instances. Within 7 days: Implement network segmentation to limit outbound connections from Oxygen servers; deploy WAF rules to block suspicious request patterns and input validation bypass attempts. Within 30 days: Monitor vendor announcements for patch availability; evaluate alternative solutions or upgrade path; conduct security assessment of potentially compromised systems.

Laborator Oxygen CVE-2025-69299

HIGH

Server-Side Request Forgery (SSRF) (CWE-918)

2026-02-20 audit@patchstack.com

SSRF

7.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

7.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 22:04 vuln.today

CVE Published

Feb 20, 2026 - 16:22 nvd

HIGH 7.2

DescriptionCVE.org

Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8.

AnalysisAI

Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8. [CVSS 7.2 HIGH]

Technical ContextAI

Classified as CWE-918 (Server-Side Request Forgery (SSRF)). Affects Laborator Oxygen oxygen. Server-Side Request Forgery (SSRF) vulnerability in Laborator Oxygen oxygen allows Server Side Request Forgery.This issue affects Oxygen: from n/a through <= 6.0.8.