CWE-521: Weak Password Requirements
The product does not require that users should have strong passwords.
A kind of CWE-1391 Use of Weak Credentials.
From the CWE List. © The MITRE Corporation.
Newest
- mitsubishi electric corporation pv-dr004j, pv-dr004ja +1 moreWeak Password Requirements vulnerability in Mitsubishi Electric Corporation photovoltaic system...6.5 Medium
- hangzhou hikvision system technology streaming media management serverHikvision Streaming Media Management Server Default Credentials and Authenticated Arbitrary File Read8.7 High
- filebrowserFile Browser Insecurely Handles Passwords5.9 Medium
- openc3 cosmosWeak password requirements in OpenC3 COSMOS v6.0.0 allow attackers to bypass authentication via a...9.8 Critical
- ibm security verify governanceIBM Security Verify Governance information disclosure5.9 Medium
- schule111 schule, schule school management system +1 moreSchule Has Insecure OTP Length, is Susceptible to Brute-Force Attacks6.6 Medium
- schweitzer engineering laboratories sel blueframe osImproper Access Control4.3 Medium
- sungrow logger1000SunGrow Logger1000 weak password6.3 Medium
- ibm app connect enterprise certified container, app connect enterprise certified containers operands, app connect operator +2 moreIBM App Connect Enterprise Certified Container information disclosure5.1 Medium
- govicture rx1800 firmwareVicture RX1800 EN_V1.0.0_r12_110933 was discovered to utilize a weak default password which...9.8 Critical
- znunyAn issue was discovered in Znuny before 7.1.5. When generating a support bundle, not all...7.5 High
- ibm aspera consoleIBM Aspera Console weak password requirements3.1 Low
- inaba denki sangyo co., ltd. choco tei watcher mini (ib-mct001)Weak password requirements issue exists in CHOCO TEI WATCHER mini (IB-MCT001) all versions. If...9.8 Critical
- lfprojects mlflow, mlflow mlflow/mlflow +1 moreWeak Password Requirements in mlflow/mlflow3.8 Low
- spring securityCVE-2025-22228: Spring Security BCryptPasswordEncoder does not enforce maximum password length7.4 High
- digitaldruid hoteldruidAn issue in HotelDruid version 3.0.7 and earlier allows users to set weak passwords due to the...7.1 High
- printerlogic vasion print, virtual appliance +1 moreVasion Print (formerly PrinterLogic) before Virtual Appliance Host 22.0.843 Application 20.0.1923...9.8 Critical
- ibm controllerIBM Controller information disclosure5.3 Medium
- pmwebPMWeb Setting weak password6.3 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- ibm aspera faspexIBM Aspera Faspex information disclosure5.9 Medium
- hcl software dryice myxalyticsHCL MyXalytics is affected by an improper password policy implementation vulnerability4.8 Medium
- optimizely cmsAn issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity...7.5 High
- abb matrix series, nexus series, aspect-enterprise +2 moreForce Change of Default Credentials9.3 Critical
- abb matrix series, nexus series, aspect-ent-12 firmware +20 more +22 moreWeak Password Rules/Strength9.3 Critical
- altaitechnologies ix500 firmwareAltai Technologies Ltd Altai X500 Indoor 22 802.11ac Wave 2 AP web Management Weak password...6.5 Medium
- dlink dsl-6740c firmware, dsl6740c firmware +1 moreD-Link DSL6740C v6.TR069.20211230 was discovered to use an insecure default Wifi password,...6.5 Medium
- dlink dsl-6740c firmware, dsl6740c firmware +1 moreD-Link DSL6740C v6.TR069.20211230 was discovered to use insecure default credentials for...8.8 High
- zte zxr10 1800-2s series ,zxr10 2800-4,zxr10 3800-8,zxr10 160 series, zxr10 160 firmware, zxr10 1800-2s firmware +2 more +4 moreWeak Password Vulnerability in ZTE ZSR V2 Intelligent Multi Service Router6.0 Medium
- progress telerik report server, telerik reporting +1 morePassword policy for new users is not strong enough7.5 High
- emlog proWeak Passwords Requirements in goTenna Pro6.0 Medium
- gotenna, gotenna pro atak plugin +1 moregoTenna Pro ATAK Plugin Weak Password Requirements6.0 Medium
- rapidscada rapid scadaCheckUser in ScadaServerEngine/MainLogic.cs in Rapid SCADA through 5.8.4 allows an empty password.7.5 High
- edirectoryPossible Improper authentication Vulnerability in OpenText eDirectory7.4 High
- teldat rs123 firmware, rs123w firmware +1 moreA weak password requirement issue was discovered in Teldats Router RS123, RS123w allows a remote...8.0 High
- silverpeasSilverpeas vulnerable to password complexity rule bypass9.8 Critical
- ibm common licensingIBM Common Licensing information disclosure7.5 High
- siemens location intelligence family, location intelligence +1 moreA vulnerability has been identified in Location Intelligence family (All versions < V4.4)....6.9 Medium
- kiloview p1/p2, p1 4g video encoder firmware, p2 4g video encoder firmware +2 moreWeak Password Requirements in Kiloview P1/P2 devices7.2 High
- ibm security access manager, security verify access docker +1 moreIBM Security Access Manager Docker information disclosure6.2 Medium
- netgear wnr614 firmwareAn issue in Netgear WNR614 JNR1010V2/N300-V1.1.0.54_1.0.1 allows attackers to create passwords...8.1 High
- yms vis proImproper authentication in YMS VIS Pro9.8 Critical
- ubiquiti unifi connect display, unifi connect display cast, unifi connect ev station +5 more +7 moreAn Unverified Password Change could allow a malicious actor with API access to the device to...2.2 Low
- logint lomag warehouse management, lomag warehouse management +1 moreThe LoMag WareHouse Management application version 1.0.20.120 and older were found to allow weak...5.3 Medium
- smartofficepayroll smartofficeSmart Office Main.aspx weak password6.3 Medium
- kddi corporation hgw bl1500hmHGW BL1500HM Ver 002.001.013 and earlier contains a use of week credentials issue. A network...6.5 Medium
- arris sbg6580Arris SBG6580 devices have predictable default WPA2 security passwords that could lead to...8.8 High
- ibm cloud pak for security, qradar suite products, qradar suite +2 moreIBM QRadar Suite information dislosure5.9 Medium
- ibm engineering requirements management, engineering requirements management doors, engineering requirements management doors web access +2 moreIBM Engineering Requirements Management information disclosure5.1 Medium
- laborofficefreeWeak MySQL database root password in LaborOfficeFree6.8 Medium
- Show moreLoading…