CWE-287: Improper Authentication
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
Also known as authentification, AuthN, AuthC.
A kind of CWE-284 Improper Access Control.
From the CWE List. © The MITRE Corporation.
Newest
- oracle soa suiteVulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric...9.8 Critical
- oracle soa suiteVulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Enterprise...9.8 Critical
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...9.9 Critical
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...9.8 Critical
- oracle soa suiteVulnerability in the Oracle SOA Suite product of Oracle Fusion Middleware (component: Fabric...9.8 Critical
- oracle business process management suiteVulnerability in the Oracle Business Process Management Suite product of Oracle Fusion Middleware...8.8 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.1 Critical
- oracle corporation graalvm enterprise edition, graalvm for jdk, java se +2 moreVulnerability in the Oracle Java SE, Oracle GraalVM for JDK, Oracle GraalVM Enterprise Edition...3.7 Low
- oracle corporation java seVulnerability in Oracle Java SE (component: Networking). Supported versions that are affected...5.3 Medium
- oracle business intelligence, oracle corporation business intelligence enterprise edition +1 moreVulnerability in the Oracle Business Intelligence Enterprise Edition product of Oracle Analytics ...8.8 High
- oracle corporation java seVulnerability in Oracle Java SE (component: Compiler). Supported versions that are affected are...3.7 Low
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...8.7 High
- oracle access managerVulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (component:...8.1 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle data integratorVulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle data integratorVulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Image Packaging System)...9.8 Critical
- oracle corporation product workbenchVulnerability in the Oracle Product Workbench product of Oracle E-Business Suite (component:...9.1 Critical
- oracle corporation application object libraryVulnerability in the Oracle Application Object Library product of Oracle E-Business Suite ...9.8 Critical
- oracle communications billing and revenue managementVulnerability in the Oracle Communications Billing and Revenue Management product of Oracle...9.1 Critical
- oracle communications brm - elastic charging engine, communications billing and revenue management elastic charging engine +1 moreVulnerability in the Oracle Communications BRM - Elastic Charging Engine product of Oracle...9.8 Critical
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile...9.1 Critical
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: OIDC). Supported...6.9 Medium
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The...9.8 Critical
- oracle corporation apexVulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1...9.8 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle corporation secure backupVulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that...9.8 Critical
- networknt light-4jNetworknt light-4j 2.1.5 before 2.4.0 Authentication Bypass via Empty LDAP Password9.1 Critical
- red hat streams for apache kafka 2, streams for apache kafka 3 +1 moreCruise-control: streams for apache kafka cruise control: authentication bypass via extra path segment allows unauthenticated access to all admin endpoints8.8 High
- advantech adam-3600A vulnerability in the proprietary protocol could allow an attacker to bypass the authentication...9.3 Critical
- stormshield network securityImproper Signature Verification of Active Update Files7.5 High
- stormshield network securityImproper Signature Verification of Firmware Update Files7.8 High
- apple macosAn authentication issue was addressed with improved state management. This issue is fixed in...9.1 Critical
- apple ipados, ios and ipados, iphone os +2 moreThis issue was addressed through improved state management. This issue is fixed in iOS 27 and...2.0 Low
- ibm tririga application platformSecurity Vulnerability identified in IBM TRIRIGA - GWT Mock Authentication8.8 High
- tp-link systems inc. tapo c210 v3.6Credential Material Exposure Leading to Unauthorized Streamed Media-Session Access in TP-Link Tapo C2107.1 High
- tp-link systems inc. tapo c210 v3.6Order-Dependent Authentication Bypass in the DS JSON API in TP-Link Tapo C2105.3 Medium
- craftcms cmsCraft CMS 5.0.0 before 5.11.0 Verification Code Reuse via users/set-password8.7 High
- eptura archibusEptura Archibus Direct Web Remoting (DWR) API Authentication Bypass via Privileged Session Reuse8.6 High
- satya-vinay events-management-systemsatya-vinay Events-Management-System missing authentication6.9 Medium
- tufayellus tiktok-video-downloader-phpTufayelLUS TikTok-Video-Downloader-PHP TLS index.php certificate validation6.3 Medium
- apache software foundation camelApache Camel: Camel-Keycloak Issuer Validation Bypass When the Introspection Response Omits the iss Claim4.8 Medium
- apache camelApache Camel: Camel-Shiro Authentication Bypass via Skipped Credential Verification on Subject Reuse5.9 Medium
- glitterware passyGlitterWare Passy TLS main.dart MyHttpOverrides certificate validation6.3 Medium
- apache software foundation camelApache Camel: Camel-OAuth Authentication Bypass via Fail-Open Processors8.2 High
- eremef bandcamp-playereremef bandcamp-player Remote Control Server database.ts missing authentication6.9 Medium
- f3-factory fatfree-coref3-factory fatfree-core HTTP Client web.php _curl certificate validation6.3 Medium
- dotnet eshopdotnet eShop Catalog API Extensions.cs AddApplicationServices improper authentication6.9 Medium
- diem-project diemdiem-project diem Google Analytics Client gapi.class.php certificate validation6.3 Medium
- Show moreLoading…