CWE-250: Execution with Unnecessary Privileges
The product performs an operation at a privilege level that is higher than the minimum level required, which creates new weaknesses or amplifies the consequences of other weaknesses.
Also known as Excessive Agency.
A kind of CWE-269 Improper Privilege Management.
From the CWE List. © The MITRE Corporation.
Newest
- autodesk installerPrivilege Escalation Vulnerability7.8 High
- dell command monitor (dcm), command monitor +1 moreDell Command Monitor (DCM), versions prior to 10.12.3.28, contains an Execution with Unnecessary...7.3 High
- ibm infosphere information serverIBM InfoSphere Information Server is vulnerable to privilege escalation7.8 High
- nagios xiNagios XI < 5.5.7 Privilege Escalation via MRTG Graphing Component8.5 High
- nagios xiNagios XI < 5.7.3 Privilege escalation via Insecure getprofile.sh Script8.5 High
- nagios xiNagios XI < 5.8.7 Insecure Permissions on Highcharts Temporary Directory8.5 High
- nagios log serverNagios Log Server < 2024R2.0.3 Logstash Process Root Privileges9.3 Critical
- ibm sterling connect:direct for unix, sterling connect\ +1 moreIBM Sterling Connect:Direct for UNIX command execution7.2 High
- apache airflowApache Airflow: Airflow 3 API: /api/v2/dagReports executes DAG Python in API5.4 Medium
- apache airflowApache Airflow: Privilege boundary bypass in bulk APIs (create action can upsert existing Pools/Connections/Variables)4.6 Medium
- hp thinpro, hp inc. thinpro 8.1 +1 moreHP ThinPro 8.1 SP8 Security Updates8.5 High
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network...9.3 Critical
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network...5.3 Medium
- moxa edf-g1002-bp series, edr-8010 series, edr-g9010 series +4 more +6 moreAn Execution with Unnecessary Privileges vulnerability has been identified in Moxa’s network...9.3 Critical
- ilevia eve x1 server firmware, ilevia srl. eve x1 server +1 moreIlevia EVE X1 Server 4.7.18.0.eden Root Privilege Escalation9.3 Critical
- icinga, icinga icinga2 +1 moreIcinga 2 signals sent as root to processes based on PID file written by the Icinga 2 daemon user4.0 Medium
- f5 f5os-a, f5os-c, f5os - appliance +1 more +3 moreF5OS Vulnerability8.5 High
- lenovo pc manager, pcmanager +1 moreA potential vulnerability was reported in PC Manager that could allow a local authenticated user...8.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP iControl REST and tmsh vulnerability8.5 High
- f5 big-ip, big-ip access policy manager, big-ip advanced firewall manager +19 more +21 moreBIG-IP TMSH vulnerability8.5 High
- No product listedClash Verge Rev thru 2.2.3 forces the installation of system services(clash-verge-service) by...7.8 High
- ibm security verify access docker, security verify access, security verify access appliance +2 more +4 moreIBM Security Verify Access privilege escalation9.3 Critical
- icewhaletech zimaosZimaOS Privilege Escalation using localhost calls to File API Upload5.2 Medium
- icewhaletech zimaosZimaOS reads arbitrary files using localhost calls to File API Download4.8 Medium
- hewlett packard enterprise (hpe) hpe aruba networking edgeconnect sd-wan gatewayAuthenticated Arbitrary Process Termination allows potential System Disruption in ECOS6.8 Medium
- phpgurukul online library management systemAn issue in Online Library Management System v.3.0 allows an attacker to escalate privileges via...9.8 Critical
- tuyaAn issue discovered in the Tuya Smart Life App 5.6.1 allows attackers to unprivileged control...9.1 Critical
- ibm security verify information queueIBM Security Verify Information Queue code execution6.4 Medium
- sap se netweaverMissing Authentication check in SAP NetWeaver9.1 Critical
- xwiki-contrib application-blogXWiki Blog Application: Privilege Escalation (PR) from account through blog content8.7 High
- unisoc (shanghai) technologies co., ltd. sc9863a/t310/t610/t618/t606/t612/t616/t760/t770/t820/s8000/In BootRom, there's a possible unchecked command index. This could lead to local escalation of...7.8 High
- unisoc (shanghai) technologies co., ltd. sc9863a//t310/t610/t618/In BootRom, there is a possible unchecked write address. This could lead to local escalation of...7.8 High
- unisoc (shanghai) technologies co., ltd. sc9863a//t310/t610/t618/In BootROM, there is a possible missing validation for Certificate Type 0. This could lead to...7.8 High
- No product listedMitrastar GPT-2741GNAC-N2 devices are provided with access through ssh into a restricted default...8.4 High
- ibm qradar siem, qradar incident forensics, qradar security information and event manager +2 moreIBM QRadar SIEM privilege escalation7.8 High
- dell data lakehouseDell Data Lakehouse, versions prior to 1.5.0.0, contains an Execution with Unnecessary Privileges...6.7 Medium
- h3c m2 nasH3C M2 NAS Webserver Configuration unnecessary privileges7.3 High
- siemens sinec traffic analyzerA vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions ...8.8 High
- axis osACAP applications can be executed with elevated privileges, potentially leading to privilege...6.7 Medium
- sap se gui for windowsInformation Disclosure in SAP GUI for Windows4.5 Medium
- tyler technologies erp pro 9 saas, tylertech erp pro 9 +1 moreTyler Technologies ERP Pro 9 SaaS application escape5.3 Medium
- ibm iIBM i privilege escalation7.5 High
- hp poly clariti managerPoly Clariti Manager - Multiple Security Vulnerabilities6.9 Medium
- ruckuswireless ruckus unleashed, ruckus zonedirector +1 moreAn issue was discovered in CommScope Ruckus Unleashed prior to 200.15.6.212.14 and 200.17.7.0.139...8.8 High
- nokia single ranNokia Single RAN baseband OAM service extensive capabilities6.4 Medium
- ibm webmethods integration server, webmethods integration +1 moreIBM webMethods Integration Sever code execution7.2 High
- red hat enterprise linux 10, enterprise linux 7 extended lifecycle support, enterprise linux 8 +10 more +12 moreLibblockdev: lpe from allow_active to root in libblockdev via udisks7.0 High
- ibm security verify directoryIBM Security Verify Directory Container command execution7.8 High
- ibm backup recovery and media services for i, i +1 moreIBM Backup Recovery and Media Services for i code execution8.5 High
- xwiki, xwiki xwiki-platform +1 moreXWiki allows remote code execution through default value of wiki macro wiki-type parameters8.7 High
- Show moreLoading…