CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- langflowLangflow: Unauthenticated file upload leads to DoS (space exhaustion) and information leak9.3 Critical
- hermes-webuiHermes WebUI < 0.51.409 - Unauthenticated Passkey Registration via Authentication Bypass9.1 Critical
- nousresearch hermes-agentHermes Agent < 0.16.0 - DNS Rebinding Bypass via WebSocket Endpoints8.7 High
- rti connext professionalMissing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Identity Spoofing.6.1 Medium
- rti connext professionalMissing Authentication for Critical Function vulnerability in RTI Connext Professional (Security Plugins) allows Fake the Source of Data.6.0 Medium
- dell powerflex, powerflex manager +1 moreDell PowerFlex Manager, version(s) [Versions], contain(s) a Missing Authentication for Critical...8.8 High
- nltk nltk/nltkUnauthenticated Denial of Service in nltk.app.wordnet_app7.5 High
- n8nn8n: n8n MCP Browser HTTP Transport Exposes Unauthenticated Browser-Control Sessions8.8 High
- crawl4aiCrawl4AI - Server-Side Request Forgery via Direct Crawl Endpoints9.2 Critical
- crawl4aiCrawl4AI - Authentication Bypass via Hardcoded JWT Signing Key9.3 Critical
- crawl4aiCrawl4AI - Arbitrary JavaScript Execution via /execute_js Endpoint9.2 Critical
- crawl4aiCrawl4AI - Stored Cross-Site Scripting in Monitor Dashboard5.3 Medium
- crawl4aiCrawl4AI - Unauthenticated Access to Monitor Endpoints via Docker API Server6.9 Medium
- crawl4aiCrawl4AI - Server-Side Request Forgery via Webhook URLs9.2 Critical
- crawl4aiCrawl4AI - Arbitrary File Write via output_path Parameter8.8 High
- oracle corporation outsourced mfg for discrete industries, oracle outsourced manufacturing for discrete industries +1 moreVulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business...8.8 High
- oracle corporation outsourced mfg for discrete industries, oracle outsourced manufacturing for discrete industries +1 moreVulnerability in the Oracle Outsourced Mfg for Discrete Industries product of Oracle E-Business...8.8 High
- oracle universal work queueVulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component:...7.5 High
- oracle universal work queueVulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component:...8.8 High
- oracle universal work queueVulnerability in the Oracle Universal Work Queue product of Oracle E-Business Suite (component:...9.9 Critical
- oracle project portfolio analysisVulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite ...8.8 High
- oracle project portfolio analysisVulnerability in the Oracle Project Portfolio Analysis product of Oracle E-Business Suite ...8.8 High
- oracle subledger accountingVulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component:...7.5 High
- oracle subledger accountingVulnerability in the Oracle Subledger Accounting product of Oracle E-Business Suite (component:...7.5 High
- oracle qualityVulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal...8.8 High
- oracle qualityVulnerability in the Oracle Quality product of Oracle E-Business Suite (component: Internal...8.8 High
- oracle process manufacturing process planningVulnerability in the Oracle Process Manufacturing Process Planning product of Oracle E-Business...8.8 High
- oracle cost managementVulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost...8.8 High
- oracle isetupVulnerability in the Oracle iSetup product of Oracle E-Business Suite (component: General Ledger...8.8 High
- oracle corporation complex maintenance, repair and overhaul, oracle complex maintenance repair and overhaul +1 moreVulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business...7.5 High
- oracle corporation complex maintenance, repair and overhaul, oracle complex maintenance repair and overhaul +1 moreVulnerability in the Oracle Complex Maintenance, Repair and Overhaul product of Oracle E-Business...7.5 High
- oracle applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...9.9 Critical
- oracle cost managementVulnerability in the Oracle Cost Management product of Oracle E-Business Suite (component: Cost...8.8 High
- oracle spares managementVulnerability in the Oracle Spares Management product of Oracle E-Business Suite (component:...8.8 High
- oracle receivablesVulnerability in the Oracle Receivables product of Oracle E-Business Suite (component: Internal...8.1 High
- oracle hr intelligenceVulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (component:...7.2 High
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...8.8 High
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...8.1 High
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...9.8 Critical
- oracle process manufacturing product developmentVulnerability in the Oracle Process Manufacturing Product Development product of Oracle E...8.8 High
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...9.3 Critical
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...9.1 Critical
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...9.8 Critical
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component: Web...9.8 Critical
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...9.8 Critical
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...8.8 High
- oracle enterprise command center frameworkVulnerability in the Oracle Enterprise Command Center Framework product of Oracle E-Business...9.8 Critical
- oracle jd edwards enterpriseone human resources managementVulnerability in the JD Edwards EnterpriseOne Human Resources Management product of Oracle JD...9.1 Critical
- oracle siebel apps - marketingVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)....9.8 Critical
- oracle jd edwards enterpriseone toolsVulnerability in the JD Edwards EnterpriseOne Tools product of Oracle JD Edwards (component:...9.8 Critical
- Show moreLoading…