CWE-592 vulnerabilities

• apache tomcat Apache Tomcat: Digest authenticator will authenticate any unknown user CVE-2026-43512 Public exploitFix available 9.8 CriticalMay 12, 2026
• palantir com.palantir.acme.gaia:gaia Gaia unauthenticated endpoints CVE-2023-30971 6.8 MediumDecember 19, 2025
• ellevo An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api... CVE-2024-42759 6.3 MediumSeptember 9, 2024
• horizoncloud caterease An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly... CVE-2024-38884 7.8 HighAugust 2, 2024
• red hat wildfly-security-manager, redhat jboss enterprise application platform, single sign-on +2 more A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests... CVE-2019-14843 Fix available 7.5 HighJanuary 7, 2020
• keycloak Keycloak Authentication Error CVE-2019-14910 9.3 CriticalDecember 5, 2019
• keycloak Keycloak Authentication Error CVE-2019-14909 9.3 CriticalDecember 4, 2019
• keycloak, redhat single sign-on +1 more Improper Verification of Cryptographic Signature in keycloak CVE-2019-10201 Fix available 8.1 HighAugust 14, 2019
• the foreman project foreman-tasks, redhat satellite +1 more An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously,... CVE-2019-10198 6.5 MediumJuly 31, 2019
• heketi project heketi, redhat openshift container platform +1 more It was found that default configuration of Heketi does not require any authentication potentially... CVE-2019-3899 Fix available 7.3 HighApril 22, 2019
• baxter sigma spectrum infusion system, sigma spectrum infusion system firmware +1 more Baxter SIGMA Spectrum Infusion System version 6.05 (model 35700BAX) with wireless battery module ... CVE-2014-5432 9.8 CriticalMarch 26, 2019
• [unknown] libssh, canonical ubuntu linux, debian linux +6 more +8 more A vulnerability was found in libssh's server-side state machine before versions 0.7.6 and 0.8.4.... CVE-2018-10933 Public exploitFix available EPSS 91.8% 9.1 CriticalOctober 16, 2018
• theforeman foreman, [unknown] smart proxy dynflow +1 more smart_proxy_dynflow gem authentication bypass in Foreman remote execution feature CVE-2018-14643 Fix available 9.8 CriticalSeptember 21, 2018
• jenkins pipeline classpath step, jenkins project pipeline: classpath step jenkins plugin +1 more Jenkins Pipeline Classpath Step plugin allowed Script Security sandbox bypass CVE-2017-2650 8.5 HighJuly 27, 2018
• [unknown] pki-core, dogtagpki, redhat enterprise linux desktop +2 more +4 more It was found that a mock CMC authentication plugin with a hardcoded secret was accidentally... CVE-2017-7537 Fix available 5.9 MediumJuly 26, 2018
• [unknown] openshift-ansible, redhat openshift container platform +1 more openshift-ansible before versions 3.9.23, 3.7.46 deploys a misconfigured etcd file that causes... CVE-2018-1085 9.0 CriticalJune 15, 2018
• [unknown] prosody prosody before versions 0.10.2, 0.9.14 is vulnerable to an Authentication Bypass. Prosody did not... CVE-2018-10847 Fix available 4.2 MediumJune 2, 2018
• phoenix contact ilc plcs, phoenixcontact ilc plcs firmware +1 more The web server in Phoenix Contact ILC PLCs can be accessed without authenticating even if the... CVE-2016-8371 Public exploit EPSS 10.9% 7.3 HighApril 5, 2018
• redhat hibernate validator, hibernate hibernate-validator, redhat jboss enterprise application platform +4 more +6 more Privilege Escalation in Hibernate Validator CVE-2017-7536 Fix available 7.0 HighJanuary 10, 2018
• gnome gdm, display manager +1 more A flaw was discovered in gdm 3.24.1 where gdm greeter was no longer setting the ran_once boolean... CVE-2017-12164 Fix available 4.1 MediumJanuary 3, 2018
• siemens simatic logon Siemens SIMATIC Logon prior to V1.5 SP3 Update 2 could allow an attacker with knowledge of a... CVE-2017-2684 9.0 CriticalFebruary 22, 2017
• curl A flaw was found in curl before version 7.51.0 When re-using a connection, curl was doing case... CVE-2016-8616 Fix available 3.7 LowNovember 2, 2016
• advantech webaccess Advantech WebAccess Authentication Bypass Issues CVE-2014-2367 7.5 July 19, 2014
• i-gen oplynx I-GEN opLYNX Central Authentication Bypass CVE-2012-4688 7.5 December 31, 2012