CWE-269: Improper Privilege Management
The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...7.0 High
- oracle corporation goldengateVulnerability in Oracle GoldenGate (component: Vendor Access Module). Supported versions that...5.5 Medium
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...7.8 High
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The...7.8 High
- oracle corporation database serverVulnerability in the RDBMS component of Oracle Database Server. Supported versions that are...8.8 High
- oracle http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: Web...7.8 High
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...6.7 Medium
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...6.7 Medium
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...5.5 Medium
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...6.7 Medium
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...5.5 Medium
- oracle http serverVulnerability in the Oracle HTTP Server product of Oracle Fusion Middleware (component: OSSL...7.8 High
- oracle outside in technologyVulnerability in the Oracle Outside In Technology product of Oracle Fusion Middleware (component:...8.4 High
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). Supported...8.4 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...7.8 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...7.8 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...5.5 Medium
- oracle corporation iprocurementVulnerability in the iProcurement product of Oracle E-Business Suite (component: E-Content...7.2 High
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Kernel). The...7.8 High
- oracle soa suiteVulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Adapters). ...9.9 Critical
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: X Window System). The...4.5 Medium
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...6.1 Medium
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...6.5 Medium
- oracle communications billing and revenue managementVulnerability in the Oracle Communications Billing and Revenue Management product of Oracle...6.7 Medium
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Supported...6.9 Medium
- oracle application testing suiteVulnerability in Oracle Application Testing Suite (component: OpenScript). The supported...7.8 High
- oracle application testing suiteVulnerability in Oracle Application Testing Suite (component: OpenScript). The supported...7.0 High
- oracle corporation inventory managementVulnerability in the Oracle Inventory Management product of Oracle E-Business Suite (component:...7.0 High
- oracle payrollVulnerability in the Oracle Payroll product of Oracle E-Business Suite (component: Internal...7.0 High
- oracle corporation edi gatewayVulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All...7.2 High
- oracle corporation enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...7.8 High
- oracle corporation edi gatewayVulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All...7.2 High
- oracle corporation autonomous health frameworkVulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported...7.8 High
- oracle corporation autonomous health frameworkVulnerability in Oracle Autonomous Health Framework (component: Trace File Analyzer). Supported...7.8 High
- oracle corporation product lifecycle analyticsVulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component...7.5 High
- oracle corporation edi gatewayVulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All...7.2 High
- oracle siebel crm, oracle corporation siebel crm deployment +1 moreVulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (component: Server...6.7 Medium
- oracle corporation autonomous health frameworkVulnerability in Oracle Autonomous Health Framework (component: AHF Instant Diagnostic Replay). ...7.8 High
- google chromeUse after free in Permissions in Google Chrome prior to 156.0.8078.47 allowed a remote attacker...8.8 High
- google chromeMemory corruption in CredentialProvider in Google Chrome on on Windows prior to 156.0.8078.47...9.6 Critical
- nokia 1830 global express (gx)A Shell Privilege Escalation vulnerability in Nokia 1830 Global Express (GX)6.7 Medium
- red hat streams for apache kafka 2, streams for apache kafka 3, streamshub console for apache kafka® +2 moreConsole-operator: streams for apache kafka console: tenant-controlled container image on clusterrole-bound pod enables namespace-to-cluster privilege escalation9.9 Critical
- apple macosThis issue was addressed by removing additional entitlements. This issue is fixed in macOS Golden...5.5 Medium
- apple macosA permissions issue was addressed with additional sandbox restrictions. This issue is fixed in...3.3 Low
- apple ipados, macos, visionos +2 more +4 moreA permissions issue was addressed with improved validation. This issue is fixed in iOS 26.7 and...6.2 Medium
- apple macosThe issue was addressed with improved checks. This issue is fixed in macOS Sequoia 15.8, macOS...7.8 High
- ibm sterling connect direct for unixIBM Sterling Connect:Direct for Unix Improper Privilege Management8.4 High
- dimitri grassi salon booking systemSalon Booking System 10.17 - 10.31.10 - Salon Staff+ Privilege Escalation to Administrator via Case-Insensitive User Meta Key7.2 High
- thorsten phpmyfaqphpMyFAQ before 4.1.9 Missing Authorization Allows Superadmin Deletion via deleteUser API7.2 High
- thorsten phpmyfaqphpMyFAQ 4.2.0-alpha before 4.2.0-beta Privilege Escalation via Group Category Restrictions API8.5 High
- Show moreLoading…