The product does not properly assign, modify, track, or check privileges for an actor, creating an unintended sphere of control for that actor.
2,834 vulnerabilities with CWE-269
CVE-2022-27487
HIGH
FortiSandbox 2.5.0-4.2.2 and FortiDeceptor 1.0-4.1.0 - Authenticated Unauthorized API Access via Crafted HTTP Requests
CVSS 8.8
CVE-2022-48227
HIGH
Acuant AsureID Sentinel < 5.2.149 - Privilege Escalation via Notepad Execution
CVSS 7.8
CVE-2022-48226
HIGH
Acuant AcuFill SDK < 10.22.02.03 - Privilege Escalation via Temp Directory EXE Execution
CVSS 7.8
CVE-2022-48353
CRITICAL
Huawei EMUI - Improper Privilege Management
CVSS 9.8
CVE-2022-43863
MEDIUM
IBM QRadar SIEM <7.5 - Privilege Escalation
CVSS 6.7
CVE-2022-48365
HIGH
Ibexa Digital Experience Platform 3.3.0-3.3.27 - Improper Privilege Management via Company Admin Role
CVSS 7.2
CVE-2022-39953
HIGH
Fortinet FortiNAC Privilege Escalation via Crafted Commands
CVSS 7.8
CVE-2022-45988
HIGH
starsoftcomm CooCare < 5.364 - Privilege Escalation via Crafted File Upload
CVSS 7.8
CVE-2022-45608
HIGH
ThingsBoard 3.4.1 - Privilege Escalation via Authority Parameter Manipulation
CVSS 8.8
CVE-2022-27677
HIGH
AMD Ryzen Master < 2.10.1.2287 - Privilege Escalation via Improper Privilege Validation
CVSS 7.8
CVE-2022-32949
HIGH
iPadOS < 15.7.1 - Arbitrary Code Execution with Kernel Privileges
CVSS 7.8
CVE-2022-32900
HIGH
macOS 11.0-11.7 - Privilege Escalation via Logic Issue
CVSS 7.8
CVE-2022-48284
CRITICAL
Huawei HiLink AI Life - Incorrect Privilege Assignment
CVSS 9.8
CVE-2022-48283
CRITICAL
Huawei HiLink AI Life - Incorrect Privilege Assignment
CVSS 9.8
CVE-2022-48341
HIGH
ThingsBoard 3.4.1 - Authenticated Vertical Privilege Escalation via Scopes Parameter
CVSS 8.8
CVE-2022-43927
MEDIUM
IBM Db2 10.5, 11.1, 11.5 - Information Disclosure via Specially Crafted Table Access
CVSS 5.9
CVE-2022-38378
MEDIUM
Fortinet FortiOS <7.2.0-7.0.7 - Privilege Escalation
CVSS 4.2
CVE-2022-42455
HIGH
ASUS Armoury Crate < 5.3.4.1 - Improper Privilege Management via EC Tool Driver IOCTL Handlers
CVSS 7.8
CVE-2022-42735
HIGH
Apache ShenYu 2.5.0 - Privilege Escalation via User Creation
CVSS 8.8
CVE-2022-34384
HIGH
Dell SupportAssist and Update < 4.5.0 - Local Privilege Escalation in Advanced Driver Restore
CVSS 7.8
CVE-2022-48286
HIGH
Huawei EMUI and HarmonyOS - Privilege Escalation in Multi-Screen Collaboration Module
CVSS 7.5
CVE-2022-38777
HIGH
Elastic Endpoint Security - Privilege Escalation
CVSS 7.8
CVE-2022-43759
HIGH
SUSE Rancher <2.5.17-2.6.10 - Privilege Escalation
CVSS 7.2
CVE-2022-48019
HIGH
Another Eden < 2.14.200 and < 3.0.20 - Privilege Escalation via wfshbr64.sys and wfshbr32.sys
CVSS 7.8
CVE-2022-3990
HIGH
HPSFViewer < 8.6.3.1 - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities
2,834
Exploit Likelihood
Medium