CWE-306: Missing Authentication for Critical Functionality
The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.
A kind of CWE-287 Improper Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- oracle corporation helidonVulnerability in the Helidon product of Oracle Fusion Middleware (component: helidon-microprofile...9.1 Critical
- oracle applications managerVulnerability in the Oracle Applications Manager product of Oracle E-Business Suite (component:...7.5 High
- oracle solarisVulnerability in the Oracle Solaris product of Oracle Systems (component: Utility). The...9.8 Critical
- oracle corporation edi gatewayVulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All...7.2 High
- oracle corporation apexVulnerability in Oracle APEX (component: General). Supported versions that are affected are 24.1...9.8 Critical
- oracle corporation edi gatewayVulnerability in the Oracle EDI Gateway product of Oracle E-Business Suite (component: All...7.2 High
- oracle webcenter sitesVulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware (component:...9.8 Critical
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.1 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.5 Medium
- oracle corporation secure backupVulnerability in Oracle Secure Backup (component: Backup and Restore). Supported versions that...9.8 Critical
- oracle corporation agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...8.1 High
- oracle corporation product lifecycle analyticsVulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply Chain (component...7.5 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...7.1 High
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...5.3 Medium
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...5.9 Medium
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...5.9 Medium
- oracle siebel crm, oracle corporation siebel crm cloud applications +1 moreVulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM (component:...8.0 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...5.3 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...6.2 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...7.5 High
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...3.7 Low
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...7.5 High
- oracle siebel crm, oracle corporation siebel apps - marketing +1 moreVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)....3.7 Low
- oracle siebel crm, oracle corporation siebel apps - marketing +1 moreVulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (component: Marketing)....4.8 Medium
- oracle peoplesoft enterprise peopletoolsVulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleSoft (component:...8.1 High
- xerj console apiAuthentication Bypass via Bearer Tokens to Unauthorized Credential Minting9.1 Critical
- @apostrophecms import-export, apostrophecms apostrophe +1 moreApostropheCMS: Missing Authentication in `cleanExport` Route3.1 Low
- vitest-dev vitest, @vitest mocker +1 moreVitest: Code injection via unauthenticated manual mock registration4.7 Medium
- lavalite cmsLavaLite CMS through 10.1.2 Missing Authentication via Filer Download Routes8.7 High
- asus routerMissing Authentication for a Critical Function in certain ASUS routers allows an unauthorized...5.3 Medium
- eosphoros-ai db-gptDB-GPT through 0.8.2 Unauthenticated RCE via /api/v1/chat/react-agent9.3 Critical
- chatchat-space langchain-chatchatLangchain-Chatchat through 0.3.1.3 Unauthenticated RCE via /tools/call Endpoint9.3 Critical
- cas-bigdatalab piflowpiflow 2.0.0 through 2.0.1 Unauthenticated RCE via Chat Agent exec_shell9.3 Critical
- dell application storeDell Application Store, versions prior to 26.05.0.7, contain a Missing Authentication for...8.8 High
- cognicellai cognitionCognition < 0.13.0 Unauthenticated RCE via Local Shell Backend9.2 Critical
- satya-vinay events-management-systemsatya-vinay Events-Management-System missing authentication6.9 Medium
- eremef bandcamp-playereremef bandcamp-player Remote Control Server database.ts missing authentication6.9 Medium
- apache software foundation answerApache Answer: Reaction API authorization bypass for restricted content9.8 Critical
- apache software foundation kylinApache Kylin: unauthenticated broadcast API and polymorphic deserialization9.8 Critical
- google samInsecure Default Policy and Unrestricted OIDC Enrollment in Google OSS Agent Mesh (SAM)9.3 Critical
- google samMissing Authentication on /libp2p-http Ingress in Google OSS Agent Mesh (SAM)9.3 Critical
- netcore nr256cnNetcore NR256CN through 1.5.140116 Unauthenticated Write to Fixed Boa Staging Files6.9 Medium
- vanus-labs vanusVanus 0.8.0 through 0.9.0 Missing Authentication via Gateway CloudEvents HTTP Receiver8.7 High
- itsmeravitejak online-examination-systemitsmeravitejak Online-Examination-System admin.php isAdmin missing authentication6.9 Medium
- roncoo roncoo-payRoncoo-pay through commit 9428382 Information Disclosure via /f2fPay/order/query8.2 High
- vastxie 99ai99AI through 4.3.0 Unauthenticated Information Disclosure via chatLog exportExcel8.7 High
- langchatLangChat through commit 2a6285a Missing Authentication on REST API Controllers9.3 Critical
- ottermind nubaseOtterMind Nubase through 0.1.4 Missing Authentication in Storage Object API8.3 High
- niefy wx-apiNiefy wx-api through 0.8.2 Authentication Bypass via Unverified openid Cookie6.3 Medium
- qiantongtech qknowqKnow through 2.4.3 Missing Authentication via /flyflow Workflow Endpoints6.9 Medium
- Show moreLoading…