CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- oracle corporation business intelligence enterprise editionVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...7.2 High
- oracle corporation database serverVulnerability in the Oracle Text component of Oracle Database Server. Supported versions that...8.5 High
- oracle corporation database serverVulnerability in the RDBMS component of Oracle Database Server. Supported versions that are...8.8 High
- oracle corporation bi publisherVulnerability in the Oracle BI Publisher product of Oracle Analytics (component: BI Platform...9.1 Critical
- oracle corporation product lifecycle analyticsVulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component...7.5 High
- oracle corporation product lifecycle analyticsVulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component...7.5 High
- oracle corporation agile plmVulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component: Event Java PX). ...9.1 Critical
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...8.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.5 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...8.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...8.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...8.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.8 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.8 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.8 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...8.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...8.1 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.5 High
- oracle corporation commerce guided search / oracle commerce experience managerVulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience Manager product...7.0 High
- oracle corporation siebel crm deploymentVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.8 High
- oracle corporation siebel crm deploymentVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.8 High
- oracle corporation siebel apps - self serviceVulnerability in the Siebel Apps - Self Service product of Oracle Siebel CRM (component: Helpdesk...8.8 High
- oracle corporation siebel crm deploymentVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.8 High
- oracle corporation siebel crm deploymentVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...9.1 Critical
- oracle corporation siebel crm deploymentVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.2 High
- oracle corporation depot repairVulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (component: Internal...8.8 High
- oracle corporation siebel apps - life sciencesVulnerability in the Siebel Apps - Life Sciences product of Oracle Siebel CRM (component: Life...7.3 High
- oracle corporation siebel crm end userVulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component: Open UI). ...8.1 High
- oracle corporation siebel crm deploymentVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...8.1 High
- oracle corporation siebel crm deploymentVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...7.3 High
- oracle corporation user managementVulnerability in the Oracle User Management product of Oracle E-Business Suite (component: Proxy...8.8 High
- oracle corporation common applicationsVulnerability in the Oracle Common Applications product of Oracle E-Business Suite (component:...7.2 High
- oracle corporation one-to-one fulfillmentVulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component:...8.0 High
- oracle corporation one-to-one fulfillmentVulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business Suite (component:...8.1 High
- oracle corporation applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...8.8 High
- oracle application testing suiteVulnerability in Oracle Application Testing Suite. The supported version that is affected is 13...7.0 High
- oracle application testing suiteVulnerability in Oracle Application Testing Suite. The supported version that is affected is 13...8.8 High
- oracle corporation peoplesoft enterprise fin inventory brazilVulnerability in the PeopleSoft Enterprise FIN Inventory Brazil product of Oracle PeopleSoft ...7.8 High
- oracle corporation marketingVulnerability in the Oracle Marketing product of Oracle E-Business Suite (component: Audience). ...8.8 High
- oracle corporation alertVulnerability in the Oracle Alert product of Oracle E-Business Suite (component: Internal...8.8 High
- oracle corporation user managementVulnerability in the Oracle User Management product of Oracle E-Business Suite (component:...8.8 High
- oracle corporation applications dbaVulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities...7.8 High
- oracle corporation applications dbaVulnerability in the Applications DBA product of Oracle E-Business Suite (component: AD Utilities...7.2 High
- oracle corporation qualityVulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal...7.5 High
- oracle corporation lease and finance managementVulnerability in the Oracle Lease and Finance Management product of Oracle E-Business Suite ...7.2 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Privilege Escalation Vulnerability in the Command Line Interface of HPE Networking EdgeConnect SD-WAN Gateways6.6 Medium
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthenticated Arbitrary File Write Leading to Remote Code Execution in EdgeConnect SD-WAN Orchestrator7.5 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthenticated Command Injection Vulnerability leads to Remote Code Execution in EdgeConnect SD-WAN Gateways8.8 High
- hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, arubanetworks edgeconnect sd-wan orchestrator, hpe edgeconnect operating system +2 moreAuthorization Bypass Leading to Privilege Escalation in HPE Networking EdgeConnect SD-WAN Gateways8.8 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthorization Bypass Leading to Privilege Escalation in EdgeConnect SD-WAN Orchestrator9.9 Critical
- Show moreLoading…