CWE-640: Weak Password Recovery Mechanism for Forgotten Password
The product contains a mechanism for users to recover or change their passwords without knowing the original password, but the mechanism is weak.
A kind of CWE-1390 Weak Authentication.
From the CWE List. © The MITRE Corporation.
Newest
- enhancesoft llc osticketWeak password recovery mechanism in osTicket by Enhancesoft LLC9.1 Critical
- veeam service provider consoleImproper handling of the returnUrl parameter in the Forgot Password function of Veeam Service...5.3 Medium
- n8nn8n before 2.32.1 Authentication Bypass via Token Exchange8.9 High
- oracle e-business suite, oracle corporation production scheduling +1 moreVulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component:...5.3 Medium
- oracle e-business suite, oracle corporation contracts integration +1 moreVulnerability in the Oracle Contracts Integration product of Oracle E-Business Suite (component:...5.0 Medium
- oracle agile product lifecycle management for processVulnerability in the Oracle Agile Product Lifecycle Management for Process product of Oracle...7.6 High
- oracle communications convergent charging controllerVulnerability in the Oracle Communications Convergent Charging Controller product of Oracle...6.4 Medium
- oracle production schedulingVulnerability in the Oracle Production Scheduling product of Oracle E-Business Suite (component:...7.1 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component:...7.5 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- oracle webcenter contentVulnerability in the Oracle WebCenter Content product of Oracle Fusion Middleware (component: Web...8.0 High
- freescout-help-desk freescoutFreeScout vulnerable to anonymous account takeover via /user-setup empty invite_hash on MySQL9.4 Critical
- cap-go capgoCapgo - Insufficient Authentication in Email Change Endpoint8.4 High
- h3c nx15H3C NX15 Administrator Password Modification Endpoint modify change_passwd password recovery6.9 Medium
- wpdevteam essential addons for elementor – popular elementor templates & widgetsEssential Addons for Elementor <= 6.6.10 - Authenticated (Contributor+) Account Takeover via Email Header Injection8.8 High
- surecart – ecommerce made easy for selling physical products, digital downloads, subscriptions, donations, & paymentsSureCart <= 4.2.3 - Unauthenticated Linked WordPress Account Takeover via Forged customer.updated Webhook8.1 High
- pimcorePimcore: Account Takeover via Password Reset URL Injection allows unauthenticated attacker to hijack any admin account with 2FA bypass8.8 High
- esri portal for arcgisMissing Authentication9.8 Critical
- esri portal for arcgisWeak Password Recovery Mechanism in Portal for ArcGIS8.1 High
- coollabsio coolifyCoolify: Password reset link poisoning via X-Forwarded-Host header spoofing5.3 Medium
- fossbillingFOSSBilling: Client password reset token reuse allows persistent account takeover7.7 High
- kimaiKimai before 2.58.0 Authentication Bypass via Password Reset Link8.7 High
- mycomplianceoffice mcoAccount Denial of Service in MCO6.3 Medium
dokuwikiUbuntuAn issue in DokuWiki 2025-05-14b "Librarian" 56.2 allows a remote attacker to execute arbitrary...9.8 Critical- pravel invoice generatorInvoice Generator <= 1.0.0 - Unauthenticated Account Takeover via Weak Password Reset Validation via 'reset_user_id' Parameter9.8 Critical
- pravel signup & signinSignUp & SignIn <= 1.0.0 - Unauthenticated Privilege Escalation via Weak Password Reset Validation via 'reset_activation_code' Leading to Account Takeover9.8 Critical
- wpmudev branda – white label & branding, free login page customizerBranda – White Label & Branding, Free Login Page Customizer <= 3.4.29 - Unauthenticated Privilege Escalation via Account Takeover9.8 Critical
- cap-go capgoCap-go - Account Lockout via 2FA Misconfiguration on Unverified Email9.3 Critical
- oracle isupplier portalVulnerability in the Oracle iSupplier Portal product of Oracle E-Business Suite (component: Home...8.0 High
- No product listedPbootCMS Password MemberController.php retrieve password recovery6.9 Medium
- limesurveyLimeSurvey Password Reset Host Header Injection Discloses Reset Token8.7 High
- ousl-group-brinarybrains school student management systemOUSL-GROUP-BrinaryBrains School Student Management System Forgot Password Endpoint Login.php ajax_forgot_password password recovery6.3 Medium
- eskapism simple history – track, log, and audit wordpress changesSimple History – Track, Log, and Audit WordPress Changes <= 5.26.0 - Authenticated (Subscriber+) Account Takeover via Missing Authorization on Event Reaction Endpoint7.5 High
- qianfox foxcmsQianFox FoxCMS Admin.php edit password recovery5.1 Medium
- tiandy easy7 integrated management platformTiandy Easy7 Integrated Management Platform API Endpoint updateUserPassword password recovery6.9 Medium
- thorsten phpmyfaqphpMyFAQ - Authentication Bypass via Missing Password Reset Token in /api/user/password/update8.8 High
- thorsten phpmyfaqphpMyFAQ - Unauthenticated Password Reset via User Password Update Endpoint8.8 High
- No product listedAn issue in Intelbras VIP-1230-D-G4 Version V2.800.00IB00C.0.T allows a remote attacker to obtain...5.3 Medium
- apostrophecms apostropheApostrophe has a Weak Password Recovery Mechanism for Forgotten Password and Improper Input Validation8.1 High
- latepoint – calendar booking plugin for appointments and eventsLatePoint <= 5.5.0 - Unauthenticated Account Takeover via Weak Password Recovery Mechanism5.3 Medium
- No product listedAn issue was discovered in Gambio 4.9.2.0 (patched in 2024-02 v1.0.0 for GX4 v4.0.0.0 to v4.9.2.0...9.1 Critical
- azuracastAzuraCast: Password Reset Poisoning via Untrusted X-Forwarded-Host Header Leads to Account Takeover and 2FA Bypass8.1 High
- phpbbphpBB has Password Reset Link Poisoning via Host Header injection8.1 High
- d-link m60, dlink m60 firmware +1 moreD-Link M60 httpd password recovery6.3 Medium
- blueprintue blueprintue-self-hosted-editionblueprintUE: Password Reset Tokens Have No Expiry Window7.4 High
- filigran openaevOpenAEV's Improper Password Reset Token Management Leads to Unauthenticated Account Takeover and Platform Compromise9.1 Critical
- dell alienware 16 area-51 aa16250, alienware 16x aurora ac16251, alienware 18 area-51 aa18250 +117 more +119 moreDell Client Platform BIOS contains a Weak Password Recovery Mechanism vulnerability. An...5.1 Medium
- thedaylightstudio fuel cmsAn issue in the Forgot Password feature of Daylight Studio FuelCMS v1.5.2 allows unauthenticated...7.1 High
- chamilo chamilo-lms, lms +1 moreWeak Password Recovery Mechanism for Forgotten Password in chamilo/chamilo-lms9.4 Critical
- Show moreLoading…