CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Also known as Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- nousresearch hermes-agentNousResearch hermes-agent SimpleX Gateway Authorization adapter.py access control2.3 Low
poweradmin/poweradminPackagistPoweradmin: Broken access control (IDOR): any zone owner can modify DNS records in zones they do not own8.1 High- microsoft azure app service for linuxAzure App Service on Azure Stack Hub Elevation of Privilege Vulnerability10.0 Critical
- grafana irmCVE-2026-9765 CVE Record7.1 High
- octopus serverIn affected versions of Octopus Deploy Insufficient checks on the project trigger actions allows...5.1 Medium
- eclipse foundation basyx go componentsCWE-863: ABAC authorization bypass via trailing slash route normalization in Eclipse BaSyx Go Components9.8 Critical
- unknown wowoptin: next-gen popup makerWowOptin < 1.4.38 - Unauthenticated Opt-in Deactivation and Template Row Injection7.5 High
- metagauss profilegridProfileGrid < 5.9.9.7 - Unauthenticated Payment Bypass and Forced Group Membership via PayPal IPN Forgery6.5 Medium
- microsoft azure api management (apim), azure api management +1 moreAzure API Management (APIM) Remote Code Execution Vulnerability8.0 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - unauthenticated payment/order forgery in Easy Store extension 1.0.0-2.0.18.7 High
- joomshaper.com easy store extension for joomlaJoomla Extension - joomshaper.com - cross-customer order and personal information disclosure in Easy Store extension 1.0.0-2.0.19.2 Critical
- tassos.gr convert forms extension for joomlaJoomla Extension - tassos.gr - Sensitive data exposure in Convert Forms extension 2.5.0-5.2.28.2 High
- regularlabs.com cache cleaner extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Cache Cleaner extension5.4 Medium
- regularlabs.com modules anywhere extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Modules Anywhere extension8.1 High
- regularlabs.com geoip extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in GeoIP extension8.8 High
- bosch camera firmwareA missing authentication check in Bosch IP cameras of families CPP13 and CPP14 allows an...7.5 High
- jupyterlabJupyterLab before 4.6.2 Authentication Bypass via PyPIExtensionManager7.7 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.8 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...8.0 High
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.9 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...10.0 Critical
- regularlabs.com articles anywhere extension for joomla, modules anywhere extension for joomla +1 moreJoomla Extension - regularlabs.com - Content access and publication bypass in Articles Anywhere and Modules Anywhere extensions9.1 Critical
- regularlabs.com articles anywhere extension for joomla, users anywhere extension for joomla +1 moreJoomla Extension - regularlabs.com - restricted user-data exposure in Users Anywhere and Articles Anywhere extensions6.5 Medium
- regularlabs.com advanced module manager extension for joomla, articles anywhere extension for joomla, articles field extension for joomla +20 more +22 moreJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various Regular Labs extension AJAX endpoints8.0 High
- regularlabs.com db replacer extension for joomlaJoomla Extension - regularlabs.com - Authorization bypass in DB Replacer extension8.8 High
- regularlabs.com advanced module manager extension for joomla, conditional content extension for joomla, content templater pro extension for joomla +1 more +3 moreJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs conditions manager8.8 High
- regularlabs.com sourcerer extension for joomlaJoomla Extension - regularlabs.com - various code injection vectors in Sourcerer extension9.8 Critical
- regularlabs.com regular labs extension manager extension for joomlaJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in Regular Labs Extension Manager8.8 High
- regularlabs.com content templater extension for joomla, rereplacer extension for joomla, snippets extension for joomla +2 moreJoomla Extension - regularlabs.com - Inconsistent CSRF token checks / privilege checks in various admin/import/export actions of multiple Regular Labs extension8.8 High
- joomdonation.com events booking extension for joomlaJoomla Extension - joomdonation.com - Invoice data exfiltration via incorrect ACL check in Events Booking 5.0.0-5.8.17.5 High
- arraytics timeticsTimetics < 1.0.57 - Unauthenticated Booking Auto-Approval via Arbitrary payment_method5.3 Medium
- gitea open source git serverPublic-Only Personal access tokens scope bypass in Organization and Permission Endpoints4.9 Medium
- oracle graalvm, graalvm for jdk, jdk +3 more +5 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...7.8 High
- oracle corporation hrms (uk), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll)....7.7 High
- oracle corporation hrms (us), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll...7.1 High
- oracle corporation hrms (us), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal...6.5 Medium
- oracle corporation hrms (norway), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (Norway) product of Oracle E-Business Suite (component: Internal...7.7 High
- oracle corporation hrms (us), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal...6.8 Medium
- oracle corporation hrms (uk), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll)....7.1 High
- oracle corporation hrms (us), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: Internal...6.5 Medium
- oracle corporation hrms (uk), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (UK) product of Oracle E-Business Suite (component: UK Payroll)....9.6 Critical
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...9.1 Critical
- oracle advanced benefitsVulnerability in the Oracle Advanced Benefits product of Oracle E-Business Suite (component: Self...6.3 Medium
- oracle applications frameworkVulnerability in the Oracle Applications Framework product of Oracle E-Business Suite (component:...8.8 High
- oracle corporation hrms (france), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (France) product of Oracle E-Business Suite (component: French...8.1 High
- oracle corporation hcm configuration workbench, oracle human capital management configuration workbench +1 moreVulnerability in the Oracle HCM Configuration Workbench product of Oracle E-Business Suite ...6.3 Medium
- oracle learning managementVulnerability in the Oracle Learning Management product of Oracle E-Business Suite (component:...6.3 Medium
- oracle qualityVulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Quality...6.3 Medium
- oracle corporation hrms (us), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll -...6.3 Medium
- oracle corporation hrms (us), oracle human resources management system +1 moreVulnerability in the Oracle HRMS (US) product of Oracle E-Business Suite (component: US Payroll -...7.5 High
- Show moreLoading…