CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...10.0 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...9.8 Critical
- opentext identity managerVulnerability in the Identity Manager product of Oracle Fusion Middleware (component: OIM Legacy...9.8 Critical
- oracle webcenter portalVulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware (component:...10.0 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...10.0 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...10.0 Critical
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...9.6 Critical
- oracle webcenter content, oracle corporation webcenter content: imaging +1 moreVulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware ...10.0 Critical
- oracle webcenter content, oracle corporation webcenter content: imaging +1 moreVulnerability in the WebCenter Content: Imaging product of Oracle Fusion Middleware (component:...8.8 High
- oracle webcenter enterprise captureVulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusion Middleware ...10.0 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle weblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). ...8.8 High
- oracle weblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). ...10.0 Critical
- oracle weblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). ...8.8 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...7.5 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle weblogic serverVulnerability in the WebLogic Server product of Oracle Fusion Middleware (component: Console). ...10.0 Critical
- oracle peoplesoft enterprise pt peopletoolsVulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component...8.1 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle peoplesoft enterprise pt peopletoolsVulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component...8.1 High
- oracle peoplesoft enterprise pt peopletoolsVulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component...9.8 Critical
- oracle peoplesoft enterprise pt peopletoolsVulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component...8.1 High
- oracle peoplesoft enterprise pt peopletoolsVulnerability in the PeopleSoft Enterprise PT PeopleTools product of Oracle PeopleSoft (component...8.2 High
- opentext identity managerVulnerability in the Identity Manager product of Oracle Fusion Middleware (component: REST...8.8 High
- opentext identity managerVulnerability in the Identity Manager product of Oracle Fusion Middleware (component: Security). ...8.8 High
- rockwell automation flex i/o ethernet/ip adaptersRockwell Automation FLEX I/O Dual-port EtherNet/IP Adapters – Multiple Vulnerabilities8.8 High
- cherryframework cherry framework themesWordPress CherryFramework Themes 3.1.4 Backup File Download8.7 High
- nefteprodukttekhnika llc buk ts-g gas station automation systemNefteprodukttekhnika BUK TS-G Gas Station Automation System Authentication Bypass via ajax-login.php Accepting Arbitrary Credentials9.3 Critical
- cap-go capgoCapgo < 12.128.2 - Denial of Service via Unverified Email Account Registration and Deletion8.7 High
- cap-goCap-go < v12.128.2 Account Takeover via Unauthenticated Email Change Mechanism7.2 High
- aqara board serviceAqara Board IoT insecure debug API8.6 High
- aqara cloud developer portalAqara Developer Portal insecure authentication token6.5 Medium
- devolutions powershell universalImproper access control on the API documentation endpoint in PowerShell Universal5.3 Medium
- iei integration corp irm-tsi410xIEI Integration Corp｜ iRM-IEI Remote Management - Missing Authentication7.9 High
- vivo pcsuiteThe authentication mechanism of a certain function in the PcSuite has a defect, which may result...9.4 Critical
- brickcom box, bullet, cube +1 more +3 moreBrickcom Cameras Missing Authentication for Critical Function8.3 High
- nesquena hermes-webuiHermes WebUI < 0.51.358 Unauthenticated Password Takeover via /api/settings9.2 Critical
- basekick-labs arcArc: Unauthenticated access to Go debug pprof endpoints leaks runtime state and enables CPU-burn DoS8.8 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...9.8 Critical
- splunk enterprise, splunk +1 moreUnauthenticated Arbitrary File Creation and Truncation in a PostgreSQL Sidecar Service Endpoint in Splunk Enterprise9.8 Critical
- roxy-wiRoxy-WI: Authentication bypass via 'api' substring in URL + unauthenticated /api/gpt8.3 High
- aix-dbMissing authentication in Aix-DB7.1 High
- lenovo accessories and display manager for enterpriseDuring an internal security assessment, a potential vulnerability was discovered in Lenovo...8.5 High
- kebev2v migration assessmentMigration-planner: unprotected delete endpoint wipes all tenant data9.1 Critical
- microsoft pc managerMicrosoft PC Manager Elevation of Privilege Vulnerability7.8 High
- Show moreLoading…