CWE-90

105 published CVEs are weaknesses of this kind, as the records or NVD name it.

Critical 13High 33Medium 53Low 6Not scored 0

CVEs per yearBy the year they were published

CVE-2026-17392
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Critical9.9
CVE-2026-17389
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium5.3
CVE-2026-17214
Multiple Vulnerabilities in IBM API Connect
IBM · API Connect
Medium4.8
CVE-2026-114420
LDAP wildcard injection exposes GINA recipient accounts
SEPPmail AG · SEPPmail Secure Email Gateway (SEG)
Medium6.9
CVE-2026-93636
Zimbra Collaboration Suite LDAP Filter Injection via Calendar Resource Attribute Name
Zimbra · Zimbra Collaboration Suite
Medium4.3
CVE-2026-15723
Improper Neutralization of Special Elements used in an LDAP Query ('LDAP Injection') in GitLab
GitLab · GitLab
High8.2
CVE-2026-93635
Zimbra Collaboration Suite LDAP Filter Injection via Unescaped computeDn() Template Substitution
Zimbra · Zimbra Collaboration Suite
Medium5.3
CVE-2026-89071
MOVEit Transfer LDAP injection in certificate-based authentication
Progress · MOVEit Transfer
High7.5
CVE-2026-110256
Dockhand before 1.0.19 Username Enumeration via LDAP Injection in tryLdapAuth
Finsys · dockhand
Medium6.3
CVE-2026-10759
BUG-000171040 Portal for ArcGIS has a security vulnerability
Esri · Portal for ArcGIS
Medium5.5