CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- oracle work in processVulnerability in the Oracle Work in Process product of Oracle E-Business Suite (component:...7.6 High
- oracle order managementVulnerability in the Oracle Order Management product of Oracle E-Business Suite (component:...8.8 High
- oracle advanced pricingVulnerability in the Oracle Advanced Pricing product of Oracle E-Business Suite (component:...8.8 High
- oracle quotingVulnerability in the Oracle Quoting product of Oracle E-Business Suite (component: Internal...7.5 High
- oracle qualityVulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal...7.5 High
- oracle qualityVulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal...8.2 High
- oracle e-business suite, oracle corporation order entry +1 moreVulnerability in the Oracle Order Entry product of Oracle E-Business Suite (component: Internal...3.4 Low
- oracle price protectionVulnerability in the Oracle Price Protection product of Oracle E-Business Suite (component:...8.4 High
- oracle hcm common architectureVulnerability in the Oracle HCM Common Architecture product of Oracle E-Business Suite (component...7.2 High
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The...7.0 High
- oracle bi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: Web Service API)...9.9 Critical
- oracle e-business suite, oracle corporation general ledger +1 moreVulnerability in the Oracle General Ledger product of Oracle E-Business Suite (component:...8.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...9.9 Critical
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Filesystems). The...7.8 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.8 High
- oracle data integratorVulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component:...7.8 High
- oracle jd edwards enterpriseone hcm foundationVulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards ...7.5 High
- oracle transportation managementVulnerability in the Oracle Transportation Management product of Oracle Supply Chain (component:...8.8 High
- oracle enterprise command center frameworkVulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business...7.2 High
- oracle identity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM...9.1 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle soa suiteVulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Integration...7.2 High
- oracle identity manager connectorVulnerability in the Oracle Identity Manager Connector product of Oracle Fusion Middleware ...9.8 Critical
- oracle http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: mod_http2...7.8 High
- oracle jd edwards enterpriseone hcm foundationVulnerability in the JD Edwards EnterpriseOne HCM Foundation product of Oracle JD Edwards ...7.1 High
- oracle http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Core). ...7.8 High
- oracle unified directoryVulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD...8.8 High
- oracle unified directoryVulnerability in the Oracle Unified Directory product of Oracle Fusion Middleware (component: OUD...7.2 High
- oracle timesten in-memory databaseVulnerability in the TimesTen In-Memory Database product of Oracle TimesTen In-Memory Database ...6.7 Medium
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...5.3 Medium
- oracle e-business suite, oracle corporation project costing +1 moreVulnerability in the Oracle Project Costing product of Oracle E-Business Suite (component:...7.2 High
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...7.8 High
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.3 Critical
- oracle mysql cluster, mysql server +1 moreVulnerability in the MySQL Server, MySQL Cluster product of Oracle MySQL (component: Server:...6.4 Medium
- oracle database serverVulnerability in the RDBMS component of Oracle Database Server. Supported versions that are...8.8 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...6.1 Medium
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:...7.2 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.8 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.8 High
- oracle vm virtualboxVulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (component: Core). ...7.8 High
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the Data Loss Prevention component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in WebExtensions8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Content Processes component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Content Processes component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Navigation component8.8 High
- mozilla firefox, thunderbird +1 morePrivilege escalation in the DOM: Workers component8.8 High
- hassantafreshi easy form builder by whitestudio – drag & drop form builderEasy Form Builder by WhiteStudio <= 4.0.11 - Unauthenticated Privilege Escalation to Administrator via Password Recovery REST Endpoint9.8 Critical
- pdovhomilja nextcrm-appNextCRM has RBAC Bypass in MCP Product Tools that Allows Low-Privileged Users to Modify the CRM Product Catalog7.1 High
- Show moreLoading…