HPE Release Control (RC) 9.13 9.20 and 9.21 before 9.21.0005 p4 allows remote authenticated users to conduct server-side request forgery (SSRF) attacks and consequently obtain sensitive information or cause a denial of service via unspecified vectors.