CWE-287: Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Also known as authentification, AuthN, AuthC.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- oracle formsVulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services,...10.0 Critical
- oracle formsVulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services,...9.8 Critical
- oracle formsVulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services,...9.8 Critical
- oracle formsVulnerability in the Oracle Forms product of Oracle Fusion Middleware (component: Forms Services,...9.8 Critical
- oracle internet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle internet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle internet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle internet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle internet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component:...10.0 Critical
- oracle internet directoryVulnerability in the Oracle Internet Directory product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle identity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: OIM...9.8 Critical
- oracle webcenter sites, webcenter portal +1 moreVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter sites, webcenter portal +1 moreVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter sites, webcenter portal +1 moreVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Web...10.0 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...10.0 Critical
- oracle service delivery platformVulnerability in the Service Delivery Platform product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.8 Critical
- oracle platform security for javaVulnerability in the Oracle Platform Security for Java product of Oracle Fusion Middleware ...9.8 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle jdeveloperVulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (component: ADF Faces)...9.8 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...9.1 Critical
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...9.1 Critical
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...10.0 Critical
- oracle identity managerVulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware (component: Core...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthentication Bypass Vulnerabilities in the Web-Based Management Interface of EdgeConnect SD-WAN Orchestrator7.5 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthentication Bypass Vulnerabilities in HPE Networking EdgeConnect SD-WAN Orchestrator API8.1 High
- arubanetworks edgeconnect sd-wan orchestrator, hewlett packard enterprise (hpe) edgeconnect sd-wan gateways, hpe edgeconnect operating system +2 moreAuthentication Bypass Vulnerabilities in API of EdgeConnect SD-WAN Orchestrator9.8 Critical
- dell wyse management suiteDell Wyse Management Suite, versions prior to 2605.0.3.683, contain an Improper Authentication...6.5 Medium
- stamparm maltrailstamparm maltrail Blacklist Endpoint httpd.py _blacklist missing authentication6.9 Medium
- codeastro blood donor management systemPHPGurukul Blood Donor Management System Admin Controllers Dashboard.php __construct improper authentication6.9 Medium
- ibm sterling b2b integrator, sterling file gateway +1 moreThe Dashboard of IBM Sterling B2B Integrator and IBM Sterling File Gateway are Vulnerable to Improper Access Control5.4 Medium
- apple ipados, macos, visionos +2 more +4 moreA privacy issue was addressed with improved handling of identifiers. This issue is fixed in iOS...7.5 High
- apple ipados, ios and ipados, iphone os +2 moreAn authentication issue was addressed with improved state management. This issue is fixed in iOS...4.6 Medium
- apple ipados, macos, visionos +2 more +4 moreAn authentication issue was addressed with improved state management. This issue is fixed in iOS...7.1 High
- apple ipados, ios and ipados, iphone os +2 moreAn authorization issue was addressed with improved state management. This issue is fixed in iOS...7.5 High
- apple macosThe issue was addressed with improved authentication. This issue is fixed in macOS Golden Gate 27...7.5 High
- apple ipados, ios and ipados, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 26.7 and iPadOS 26.7...4.6 Medium
- ibm langflow oss, langflow +1 moreLangflow is affected by improper authentication due to missing password verification in the password reset endpoint5.4 Medium
- mispMISP LdapAuth and LinOTPAuth Authentication Bypass via Empty or Non-String Credentials9.3 Critical
- andreashappe cochiseandreashappe cochise SSH Host Key ssh_connection.py asyncssh.connect certificate validation6.3 Medium
- 0x4m4 hexstrike ai0x4m4 HexStrike AI API Command Endpoint hexstrike_server.py missing authentication6.9 Medium
- Show moreLoading…