CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- argoproj argo-helmArgo Workflows Chart: Excessive Privileges in Workflow Role8.3 High
- sick ag incoming goods suiteSICK Incoming Goods Suite privilege escalation vulnerability8.8 High
- cisco catalyst sd-wan managerCisco SD-WAN vManage Privilege Escalation Vulnerability7.8 High
- tr7 application security platform (asp), tr7cyberdefense asp +1 moreContainer Escape Vulnerability in TR7's Application Security Platform (ASP)8.7 High
- blackberry secusuiteVulnerabilities in SecuSUITE Server Components Impact SecuSUITE6.4 Medium
- dell smartfabric os10 software, smartfabric os10 +1 moreDell SmartFabric OS10 Software, version(s) 10.5.6.x, 10.5.5.x, 10.5.4.x, 10.5.3.x, contain(s) an...7.8 High
- hasomed elefantLocal Privilege Escalation via Weak Service Binary Permissions7.8 High
- siemens intermesh 7177 hybrid 2.0 subscriber, intermesh 7707 fire subscriber, intermesh 7707 fire subscriber firmware +2 moreA vulnerability has been identified in InterMesh 7177 Hybrid 2.0 Subscriber (All versions < V8.2...6.9 Medium
- cisco ata 191 firmware, ata 192 firmware, analog telephone adaptor (ata) software +2 moreCisco ATA 190 Series Analog Telephone Adapter Firmware Privilege Escalation Vulnerability5.4 Medium
- open-webui, open-webui open-webui/open-webui, openwebui open webui +2 moreIDOR in open-webui/open-webui6.5 Medium
- palo alto networks globalprotect app, paloaltonetworks globalprotect +1 moreGlobalProtect App: Local Privilege Escalation (PE) Vulnerability5.2 Medium
- microsoft windows 10 version 1507, windows 10 version 1607, windows 10 version 1809 +35 more +37 moreWinlogon Elevation of Privilege Vulnerability7.8 High
- acronis cyber protect cloud agentLocal active protection service settings manipulation due to unnecessary privileges assignment....4.7 Medium
- vmware vcenter server, broadcom vmware center server, vmware cloud foundation +1 more +3 morePrivilege escalation vulnerability7.5 High
- acronis backup extension for plesk, backup plugin for cpanel & whm, backup plugin for directadmin +1 more +3 moreSensitive data disclosure and manipulation due to unnecessary privileges assignment. The...9.9 Critical
- red hat openshift container platform 4.12, openshift container platform 4.13, openshift container platform 4.14 +4 more +6 moreOpenshift/builder: path traversal allows command injection in privileged buildcontainer using docker build strategy9.1 Critical
- siemens simatic batch v9.1, simatic information server 2020, simatic information server 2022 +10 more +12 moreA vulnerability has been identified in SIMATIC BATCH V9.1 (All versions), SIMATIC Information...9.4 Critical
- samsung open source oneA vulnerability that allows an attacker in possession of the Veeam ONE Agent service account...9.1 Critical
- apache airflowApache Airflow: Authenticated DAG authors could execute code on scheduler nodes8.8 High
- b&r industrial automation aprol, br-automation industrial automation aprol +1 moreUntrusted search path vulnerability in B&R APROL5.4 Medium
- b&r industrial automation aprol, b and r industrial automotion and r aprol, br-automation industrial automation aprol +2 moreUntrusted search path vulnerability in the AprolConfigureCCServices of B&R APROL7.3 High
- cisco application policy infrastructure controller, application policy infrastructure controller (apic) +1 moreCisco Application Policy Infrastructure Controller App Privilege Escalation Vulnerability6.5 Medium
- siemens sinec nmsA vulnerability has been identified in SINEC NMS (All versions < V3.0). The affected application...8.5 High
- perkinelmer processplus, perkin elmer process plus +1 moreExecution with Unnecessary Privileges9.3 Critical
- cisco asyncos, secure web appliance +1 moreA vulnerability in the CLI of Cisco AsyncOS for Secure Web Appliance could allow an authenticated...8.8 High
- open mainframe project zowe, linuxfoundation zowe api mediation layer +1 moreImperative Local Command Injection allows Activity Masking9.0 Critical
- oracle database server, oracle corporation database - enterprise edition +1 moreVulnerability in the Oracle Database RDBMS Security component of Oracle Database Server. ...7.2 High
- ibm websphere application serverIBM WebSphere Application Server code execution7.2 High
- dell powerscale onefsDell PowerScale OneFS versions 8.2.2.x through 9.7.0.2 contain an execution with unnecessary...4.4 Medium
- spotfire analyst, for aws marketplace, server +3 more +5 moreSpotfire Remote Code Execution Vulnerability9.9 Critical
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker privilege escalation7.8 High
- ibm security access manager docker, security access manager +1 moreIBM Security Access Manager Docker privilege escalation7.8 High
- ibm iIBM i privilege escalation7.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +38 more +40 moreIncorrect Permission Assignment Privilege Escalation Vulnerability7.8 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLocal Privilege Escalation and Remote Code Execution using snmpd7.4 High
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 moreLack of privileges separation6.7 Medium
- toshiba tec corporation tec e-studio multi-function peripheral (mfp), toshibatec e-studio-2010-ac, e-studio-2015-nc +48 more +50 morePre-authenticated Remote Code Execution9.8 Critical
- nvidia virtual gpu, cloud gaming, vgpu software and cloud gaming +1 more +3 moreCVE7.8 High
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sonoma 14.4, macOS...8.6 High
- ivanti secure access clientA local privilege escalation vulnerability in Ivanti Secure Access Client for Windows allows a...7.8 High
- ibm security verify access dockerIBM Security Verify Access privilege escalation8.4 High
- fogprojectconfigureNFS in lib/common/functions.sh in FOG through 1.5.10 allows local users to gain privileges by mounting a crafted NFS share (because of no_root_squash and insecure). In order to exploit the vu…7.8 High
- red hat advanced cluster management for kubernetes 2, openshift data foundation 4.20, rhodf-4.16-rhel-9 +2 moreSubmariner-operator: rbac permissions can allow for the spread of node compromises6.6 Medium
- ibm aix, vios +1 moreIBM AIX command execution8.4 High
- ge healthcare echopac software only, echopac turnkey, imagevault +2 more +4 moreElevation of privilege vulnerability in GE HealthCare EchoPAC products8.4 High
- dell powerscale onefsDell PowerScale OneFS versions 8.2.x through 9.7.0.1 contains an execution with unnecessary...6.7 Medium
- oracle graalvm, netapp active iq unified manager, data infrastructure insights acquisition unit +6 more +8 moreVulnerability in the Oracle Java SE, Oracle GraalVM Enterprise Edition product of Oracle Java SE ...3.1 Low
- oracle solaris, oracle corporation solaris operating system +1 moreVulnerability in the Oracle Solaris product of Oracle Systems (component: Zones). The supported...8.2 High
- lunary, lunary-ai lunary-ai/lunary +1 moreIDOR Vulnerability in lunary-ai/lunary9.1 Critical
- canimaan clamxavAn issue in Canimaan Software LTD ClamXAV v3.1.2 through v3.6.1 and fixed in v.3.6.2 allows a...7.8 High
- Show moreLoading…