CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Also known as Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...8.7 High
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...9.9 Critical
- oracle identity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core...8.8 High
- oracle identity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core...8.8 High
- oracle web applications desktop integratorVulnerability in the Oracle Web Applications Desktop Integrator product of Oracle E-Business...6.5 Medium
- oracle corporation enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...6.5 Medium
- oracle corporation graalvmVulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The...8.1 High
- oracle corporation graalvmVulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The...8.1 High
- oracle corporation graalvmVulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compiler). The...8.1 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthenticated Information Disclosure Vulnerability in HPE Networking EdgeConnect SD-WAN Orchestrator API8.5 High
- devolutions serverImproper access control in the vault entry listing feature in Devolutions Server 2026.2.16 and...6.5 Medium
- joomgalleryfriends.net joomgallery extension for joomlaJoomla Extension - joomgalleryfriends.net - Unauthenticated arbitrary file upload via the TUS endpoint in JoomGallery < 4.4.26.3 Medium
- No product listedWuzhiCMS Avatar Upload index.php setAvatar unrestricted upload5.3 Medium
- dell smartfabric os10 softwareDell SmartFabric OS10 Software, versions prior to 10.6.1.3, contains a Session Fixation...9.8 Critical
- sourcecodester online faculty clearance systemSourceCodester Online Faculty Clearance System Profile Picture Upload edit_picture.php move_uploaded_file unrestricted upload5.3 Medium
- d-link dir-882D-Link DIR-882 CGI Binary dllog.cgi main information disclosure6.9 Medium
- sourcecodester college notes gallery management systemSourceCodester College Notes Gallery Management System Profile Upload userprofile.php unrestricted upload5.3 Medium
- phpgurukul hostel management systemPHPGurukul Hostel Management System checklogin.php access control5.3 Medium
- ibm sterling file gatewayIBM Sterling File Gateway is Vulnerable to Improper Access Control7.5 High
- apple macosA logic issue was addressed with improved state management. This issue is fixed in macOS Golden...5.5 Medium
- apple macosThis issue was addressed through improved state management. This issue is fixed in macOS Golden...5.5 Medium
- apple macosAn authorization issue was addressed with improved access control. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreThis issue was addressed by removing the vulnerable code. This issue is fixed in iOS 27 and...5.5 Medium
- apple macosA permissions issue was addressed with improved state management. This issue is fixed in macOS...4.4 Medium
- apple macosAn authorization issue was addressed with improved state management. This issue is fixed in macOS...8.2 High
- apple ipados, macos, visionos +3 more +5 moreThis issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7,...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27. An...4.4 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS...7.8 High
- apple macosAn issue existed in the handling of snapshots. The issue was resolved with improved permissions...5.5 Medium
- apple macosThis issue was addressed with improved checks. This issue is fixed in macOS Golden Gate 27, macOS...7.8 High
- apple macosA permissions issue was addressed with improved state management. This issue is fixed in macOS...5.5 Medium
- apple ipados, macos, visionos +2 more +4 moreThe issue was addressed with improved checks. This issue is fixed in iOS 26.6 and iPadOS 26.6,...5.5 Medium
- apple ipados, macos, ios and ipados +1 more +3 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7...5.5 Medium
- apple ipados, macos, tvos +4 more +6 moreA permissions issue was addressed with additional restrictions. This issue is fixed in iOS 26.7...5.5 Medium
- cosmicstack-labs mercury-agentcosmicstack-labs mercury-agent Shell Permission Manifest permissions.ts PermissionManager.checkShellCommand information disclosure4.8 Medium
- cisco secure email and web managerCisco Secure Email Gateway Security Hardening Release9.8 Critical
- android systemOctober CMS: Safe Mode Sandbox Bypass via Session Store and Forwarded Builder Calls3.3 Low
- hiperdino rest apiInadequate access control in the Hiperdino REST API9.2 Critical
- joomshaper.com sp page builder (free and pro) extension for joomlaJoomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation in SP Page Builder (Free and Pro) 4.0.0 - 6.9.05.1 Medium
- brokercap bifrostBifrost unauthenticated remote code execution via MCP stdio client registration9.8 Critical
- anil-matcha open-generative-aiAnil-matcha Open-Generative-AI S3 Upload upload-binary unrestricted upload6.9 Medium
- rabindralamsal inventory-management-systemRizwan17 inventory-management-system dashboard.php access control6.9 Medium
- phpgurukul bank locker management systemPHPGurukul Bank Locker Management System add-locker-form.php unrestricted upload5.3 Medium
- phpgurukul bank locker management systemPHPGurukul Bank Locker Management System sidebar.php access control5.3 Medium
- vvbbnn00 warp-clash-apivvbbnn00 WARP-Clash-API Subscription subscription.py get_surge_subscription access control5.3 Medium
- chengdu qilu technology ludashiChengdu Qilu Technology Ludashi ComputerZ_x64.sys sub_11008 information disclosure4.6 Medium
- lenve vhrlenve vhr Avatar Upload userface FastDFSUtils.upload unrestricted upload5.3 Medium
- internetdownloadmanager internet download managerTonec Internet Download Manager Kernel Driver idmwfp.sys access control9.3 Critical
- Show moreLoading…