CWE-284: Improper Access Control
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.
Also known as Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network could exploit an Improper Access Control...8.6 High
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network and under certain conditions could exploit an...5.3 Medium
- ubiquiti inc unifi protect ai keyA malicious actor with access to the network could exploit an Improper Access Control...5.3 Medium
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Access Control (CWE-284)7.5 High
- adobe c2pa, c2pa tool, c2pa-web +3 more +5 moreCAI Content Credentials | Improper Access Control (CWE-284)7.5 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty Improper Access Control9.1 Critical
- ibm websphere application server - libertyIBM WebSphere Application Server Liberty is affected by an improper access control8.2 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Information Disclosure Vulnerability4.9 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability8.8 High
- phpwcmsslackero phpwcms Extension Check cnt23.article.inc.php unrestricted upload6.9 Medium
- hbai-ltd toonflow-appHBAI-Ltd Toonflow-app exportData Endpoint information disclosure4.8 Medium
- xenx86: XPTI may break on huge-memory systems8.8 High
- owthub library management systemSourceCodester Library Management System add_admin.php move_uploaded_file unrestricted upload6.9 Medium
- sourcecodester e-learning systemSourceCodester E-Learning System Users.php save_users unrestricted upload6.9 Medium
- sourcecodester contact tracing systemSourceCodester Contact Tracing System Users.php move_uploaded_file unrestricted upload6.9 Medium
- No product listedProPhoenix Law RMS v2022.2403.3.101 was discovered to contain an incorrect access control issue...9.8 Critical
- elated-themes frappeFrappe before 13.46.3 Improper Access Control for Email Templates7.1 High
- ibm maximo application suite - location service for esri componentIBM Maximo Application Suite - Location Service for Esri Component Improper Access Control7.7 High
- netcore nr268Netcore NR268 DDNS ddns_wan_list_show.cgi ddns_wan_list_show information disclosure5.1 Medium
- get-convex convex-backendConvex: Unauthorized data access4.3 Medium
- @backstage backend-defaults, backstage +1 moreBackstage: Improper access control in backend action invocation4.3 Medium
- 1024-lab smart-admin1024-lab smart-admin Support Config Query queryByKey access control5.3 Medium
- kusalkasilva learning-management-systemKusalkaSilva Learning-Management-System upload_save.php getimagesize unrestricted upload5.3 Medium
- ibm db2IBM® Db2® is vulnerable to arbitrary library loading via the CREATE WRAPPER command, allowing a privileged database user to read sensitive files from the host filesystem7.7 High
- No product listedWMCMS index.php information disclosure5.3 Medium
- tsi-coop tsi-dpdp-cmstsi-coop tsi-dpdp-cms JSON Schema Validation information disclosure6.9 Medium
- samsung mobile internetImproper access control in Samsung Internet prior to version 30.0.5.6 allows local attackers to...5.9 Medium
- samsung mobile devicesImproper access control in DownloadProvider prior to SMR Oct-2026 Release 1 allows local...6.9 Medium
- samsung mobile devicesImproper access control in CocktailBarService prior to SMR Oct-2026 Release 1 allows local...5.1 Medium
- prasathmani tinyfilemanagerprasathmani TinyFileManager tinyfilemanager.php move_uploaded_file unrestricted upload5.3 Medium
- zkteco biotimeZKTeco BioTime System Settings API systemSettings access control5.3 Medium
- neterbit nw-431fNeterbit NW-431F Embedded Web Server sms.json information disclosure6.9 Medium
- go-vikunja vikunjaVikunja 2.6.0 Broken Access Control via Inherited Project Permissions5.3 Medium
- zephyrproject zephyrARM64 MMU can assign an in-use ASID to a new memory domain, breaking user-mode memory isolation7.0 High
- unknown sendpress newslettersSendPress Newsletters <= 1.26.1.20 - Subscriber+ Mailing List Sync and Newsletter Queueing4.3 Medium
- infoblox niosAuthenticated argument injection in NIOS command line leading to privilege escalation9.1 Critical
- splunk, splunk enterprise +1 moreImproper Access Control in Splunk Enterprise5.3 Medium
- splunk, splunk enterprise, secure gateway +2 moreImproper Access Control through REST API Endpoints in Splunk Secure Gateway6.5 Medium
- cisco campus gateway software, meraki mr wireless access points software, meraki mv firmware +1 more +3 moreCisco Meraki Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities8.8 High
- cisco application policy infrastructure controller (apic)Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Access Control Vulnerabilities9.8 Critical
- cisco nx-os software, nx-os system software in aci mode, unified computing system (managed) +2 moreCisco NX-OS Software Security Hardening Release: October 2026 - Improper Access Control Vulnerabilities9.8 Critical
- cisco nx-os system software in aci modeCisco Nexus 9000 Series Fabric Switches in ACI Mode Policy-Based Redirect Endpoint Group Contract Bypass Vulnerability5.8 Medium
- imagemagickImageMagick: Policy Bypass in CUT encoder4.0 Medium
- mispMISP Correlation Engine Fails to Refresh When Event Distribution or Sharing Group Changes5.3 Medium
- ordasoft.com touch slider extension for joomlaJoomla Extension - ordasoft.com - Unauthenticated Destructive CRUD in OrdaSoft Touch Slider < 5.4.66.9 Medium
- codepeople cp media playerCP Media Player < 1.3.4 - Contributor+ Media Player Settings Update2.7 Low
- m a vinoth kumar frontend dashboardFrontend Dashboard < 3.0.0 - Subscriber+ Profile and Post Field Deletion via fed_user_profile_delete4.3 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.3 High
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities6.5 Medium
- ibm langflow oss, langflow +1 moreLangflow OSS is affected by multiple vulnerabilities8.8 High
- Show moreLoading…