The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,838 vulnerabilities with CWE-269
CVE-2018-19411
HIGH
PRTG Network Monitor <18.2.40.1683 - Privilege Escalation
CVSS 8.8
CVE-2018-6080
MEDIUM
Google Chrome <65.0.3325.146 - Info Disclosure
CVSS 6.5
CVE-2018-3635
HIGH
Intel Rapid Storage Technology < 16.7 - Privilege Escalation via Installer Input Validation
CVSS 7.8
CVE-2018-2481
HIGH
SAP Advanced Business Application Pro... - Improper Privilege Management
CVSS 7.2
CVE-2018-15762
CRITICAL
Pivotal Operations Manager <2.0.24, <2.1.15, <2.2.7, <2.3.1 - Privilege Escalation
CVSS 9.0
CVE-2018-15321
MEDIUM
BIG-IP 11.2.1-11.5.6 - Authenticated Privilege Escalation via TMSH Command Bypass
CVSS 4.9
CVE-2018-14828
HIGH
Advantech WebAccess <8.3.1 - Privilege Escalation
CVSS 7.8
CVE-2018-13400
MEDIUM
Atlassian Jira < 7.6.9 - Improper Privilege Management
CVSS 4.7
CVE-2018-15592
HIGH
Ivanti Workspace Control < 10.3.10.0 - Authenticated Privilege Escalation via Named Pipe
CVSS 7.8
CVE-2018-12596
CRITICAL
Episerver Ektron CMS < 9.0 SP3 CU 31 / 9.1 < SP3 CU 45 / 9.2 < SP2 CU 22 - Unauthenticated Privilege Escalation
CVSS 9.8
CVE-2018-13802
HIGH
Siemens ROX II < 2.12.1 - Authenticated OS Command Execution via SSH
CVSS 7.2
CVE-2018-13801
HIGH
Siemens ROX II < 2.12.1 - Authenticated Privilege Escalation via SSH
CVSS 8.8
CVE-2018-17855
HIGH
Joomla! <3.8.13 - Privilege Escalation
CVSS 8.8
CVE-2018-0438
HIGH
Cisco Umbrella Enterprise Roaming Client < 2.1.127 Privilege Escalation via File Permission Bypass
CVSS 7.8
CVE-2018-0437
HIGH
Cisco Umbrella Enterprise Roaming Client < 2.1.118 - Improper Privilege Management
CVSS 7.8
CVE-2018-0436
HIGH
Cisco Webex Teams < 10.6.0 - Authenticated Improper Access Control
CVSS 8.7
CVE-2018-0425
CRITICAL
Cisco RV110W RV130W RV215W - Unauthenticated Sensitive Information Disclosure via Web Management Interface
CVSS 9.8
CVE-2018-0503
MEDIUM
MediaWiki 1.27.0-1.27.4, 1.31.0 - Improper Privilege Management via Rate Limit Override
CVSS 4.3
CVE-2018-14808
MEDIUM
Emerson AMS Device Manager <14 - Privilege Escalation
CVSS 6.5
CVE-2018-1550
MEDIUM
IBM Tivoli Storage Manager 7.1.8.0-7.1.8.2 - Denial of Service via Sensitive Information Corruption
CVSS 6.2
CVE-2018-11614
HIGH
Samsung Members < 2.4.25 - Privilege Escalation via Intent Handling
CVSS 8.8
CVE-2018-10502
HIGH
Samsung Galaxy Apps <4.2.18.2 - Privilege Escalation
CVSS 7.8
CVE-2018-14825
MEDIUM
Honeywell Mobile Computers - Multiple Versions - Info Disclosure
CVSS 5.8
CVE-2018-11786
HIGH
Apache Karaf < 4.2.0 - Unauthenticated Arbitrary File Read and Write via SSH Console
CVSS 8.8
CVE-2018-13799
CRITICAL
SIMATIC WinCC OA < V3.14-P021 - Unauthenticated Privilege Escalation via Data Point Access
CVSS 9.1
Details
Vulnerabilities
2,838
Exploit Likelihood
Medium