CWE-592
24 published CVEs are weaknesses of this kind, as the records or NVD name it.
- Published CVEs
- 24
- Last 12 months
- 2
- Critical
- 8
- Known exploited
- 0
Critical 8High 9Medium 6Low 1Not scored 0
CVEs per yearBy the year they were published
- 20121
- 20141
- 20171
- 201810
- 20196
- 20201
- 20242
- 20251
- 20261
Newest CVEs
- CVE-2026-43512
Apache Tomcat: Digest authenticator will authenticate any unknown user
Apache Software Foundation · Apache Tomcat
Critical9.8 - CVE-2023-30971
Gaia unauthenticated endpoints
Palantir · com.palantir.acme.gaia:gaia
Medium6.8 - CVE-2024-42759
An issue in Ellevo v.6.2.0.38160 allows a remote attacker to escalate privileges via the /api/usuario/cadastrodesuplente endpoint.
Product not named
Medium6.3 - CVE-2024-38884
An issue in Horizon Business Services Inc. Caterease 16.0.1.1663 through 24.0.1.2405 and possibly later versions, allows a local attacker to perform an…
Product not named
High7.8 - CVE-2019-14843
A flaw was found in Wildfly Security Manager, running under JDK 11 or 8, that authorized requests for any requester. This flaw could be used by a malicious app…
Red Hat · wildfly-security-manager
High7.5 - CVE-2019-14910
A vulnerability was found in keycloak 7.x, when keycloak is configured with LDAP user federation and StartTLS is used instead of SSL/TLS from the LDAP server…
Keycloak
Critical9.3 - CVE-2019-14909
A vulnerability was found in Keycloak 7.x where the user federation LDAP bind type is none (LDAP anonymous bind), any password, invalid or valid will be…
Keycloak
Critical9.3 - CVE-2019-10201
It was found that Keycloak's SAML broker, versions up to 6.0.1, did not verify missing message signatures. If an attacker modifies the SAML Response and…
Red Hat · keycloak
High8.1 - CVE-2019-10198
An authentication bypass vulnerability was discovered in foreman-tasks before 0.15.7. Previously, commit tasks were searched through find_resource, which…
The Foreman Project · foreman-tasks
Medium6.5 - CVE-2019-3899
It was found that default configuration of Heketi does not require any authentication potentially exposing the management interface to misuse. This isue only…
The Heketi Project · heketi
High7.3