CWE-863: Incorrect Authorization
The product performs an authorization check when an actor attempts to access a resource or perform an action, but it does not correctly perform the check.
Also known as AuthZ.
A kind of CWE-285 Improper Authorization.
From the CWE List. © The MITRE Corporation.
Newest
- adobe photoshopPhotoshop Desktop | Incorrect Authorization (CWE-863)8.6 High
- indicoIndico legacy contribution export cache poisoning discloses restricted metadata3.5 Low
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)7.7 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)7.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.2 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)9.6 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)9.6 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)9.9 Critical
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.4 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.8 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)7.5 High
- adobe coldfusion, coldfusion 2023, coldfusion 2025 +2 moreColdFusion | Incorrect Authorization (CWE-863)8.8 High
- ibm websphere application server - liberty, websphere application server +1 moreIBM WebSphere Application Server Liberty Incorrect Authorization7.4 High
- ibm websphere application server - libertyIBM WebSphere Application Server Liberty Incorrect Authorization5.4 Medium
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)10.0 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +2 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)9.9 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)10.0 Critical
- adobe experience manager, experience manager 6.5, experience manager 6.5 lts +1 more +3 moreAdobe Experience Manager | Incorrect Authorization (CWE-863)10.0 Critical
- lowcoderCVE-2026-167538.8 High
- finsys dockhandDockhand before 1.0.50 OIDC Privilege Escalation via Missing Token Claim Validation9.2 Critical
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows NTFS Elevation of Privilege Vulnerability7.8 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability8.8 High
- microsoft exchange server 2016 cumulative update 23, exchange server 2019 cumulative update 14, exchange server 2019 cumulative update 15 +1 more +3 moreMicrosoft Exchange Server Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Active Directory Domain Services Remote Code Execution Vulnerability8.1 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Device Install Service Elevation of Privilege Vulnerability7.8 High
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Hyper-V Security Feature Bypass Vulnerability4.2 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +18 more +20 moreWindows Clipboard User Service Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 11 version 24h2 +20 more +22 moreWindows Key Distribution Center Security Feature Bypass Vulnerability5.3 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +22 more +24 moreWindows Encrypting File System (EFS) Tampering Vulnerability5.5 Medium
- microsoft windows 11 version 23h2, windows 11 version 24h2, windows 11 version 25h2 +10 more +12 moreWindows SMB Client Security Feature Bypass Vulnerability5.5 Medium
- microsoft windows 11 version 23h2, windows server 2025, windows server 2025 (server core installation) +1 more +3 moreWindows Bind Filter Driver Elevation of Privilege Vulnerability8.8 High
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +11 more +13 moreWindows Hello Security Feature Bypass Vulnerability4.4 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreRole: DNS Server Security Feature Bypass Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows server 2012 +12 more +14 moreRole: DNS Server Tampering Vulnerability5.5 Medium
- microsoft windows 10 version 1607, windows 10 version 1809, windows 10 version 21h2 +26 more +28 moreWindows Routing and Remote Access Service (RRAS) Security Feature Bypass Vulnerability5.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows 11 version 26h1 +7 more +9 moreWindows Kernel-Mode Drivers Information Disclosure Vulnerability5.5 Medium
- microsoft windows 10 version 21h2, windows 10 version 22h2, windows 11 version 23h2 +14 more +16 moreWindows Hyper-V Remote Code Execution Vulnerability8.8 High
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability4.3 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Information Disclosure Vulnerability6.5 Medium
- microsoft sharepoint server subscription edition, sharepoint server +1 moreMicrosoft Office SharePoint Elevation of Privilege Vulnerability8.8 High
- microsoft visual studio codeVisual Studio Code Security Feature Bypass Vulnerability7.0 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)7.2 High
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)9.8 Critical
- adobe commerce, commerce b2b, magento +2 more +4 moreAdobe Commerce | Incorrect Authorization (CWE-863)8.3 High
- grafana enterprise, oss +1 moreAzure Monitor data source resource proxy allows calls to arbitrary Azure Resource Manager APIs6.3 Medium
- grafana enterprise, oss +1 moreGit Sync connection configuration can be modified with read-only access6.5 Medium
- Show moreLoading…