CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...8.6 High
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...8.8 High
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...10.0 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...8.8 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.9 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...8.8 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...8.1 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component: Core)...9.8 Critical
- oracle coherenceVulnerability in the Oracle Coherence product of Oracle Fusion Middleware (component: Core). ...9.8 Critical
- oracle hospitality simphonyVulnerability in the Oracle Hospitality Simphony product of Oracle Food and Beverage Applications...8.1 High
- oracle weblogic serverVulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware (component:...7.2 High
- oracle data integratorVulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware (component: Rest...10.0 Critical
- oracle database server, oracle corporation net services +1 moreVulnerability in the Oracle Net Services component of Oracle Database Server. Supported versions...9.1 Critical
- oracle database serverVulnerability in the RDBMS component of Oracle Database Server. Supported versions that are...2.7 Low
- oracle siebel crm, oracle corporation siebel crm development +1 moreVulnerability in the Siebel CRM Development product of Oracle Siebel CRM (component: Siebel...9.8 Critical
- oracle product hubVulnerability in the Oracle Product Hub product of Oracle E-Business Suite (component: Item...8.1 High
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...8.8 High
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...7.0 High
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...6.5 Medium
- oracle enterprise manager base platformVulnerability in the Oracle Enterprise Manager Base Platform product of Oracle Enterprise Manager...8.8 High
- No product listedAn issue in exo-explore exo 1.0.69 allows a remote attacker to escalate privileges via the GET ...7.5 High
- No product listedThe Apple Find My backend service through 2025-12-17 allows an attacker in possession of a valid...5.3 Medium
- neutrinolabs xrdpxrdp: No authentication required with Xvnc backend on RHEL 98.0 High
- lharries whatsapp-mcp, verygoodplugins whatsapp mcp server +1 moreWhatsApp MCP: Unauthenticated bridge API allows message sending and arbitrary file exfiltration7.7 High
- heyformHeyForm has unauthenticated /api/upload endpoint that accepts arbitrary files with no auth/session/form context8.6 High
- Show moreLoading…