The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
1,461 vulnerabilities with CWE-285
CVE-2025-22174
MEDIUM
Jira Align 11.14.0-11.16.0 - Improper Authorization
CVSS 4.3
CVE-2025-22173
MEDIUM
Jira Align 11.14.0-11.16.0 - Improper Authorization
CVSS 4.3
CVE-2025-22172
MEDIUM
Jira Align 11.14.0-11.16.0 - Improper Authorization via Endpoint Access
CVSS 4.3
CVE-2025-22171
MEDIUM
Jira Align 11.14.0-11.16.0 - Improper Authorization in Private Checklist Modification
CVSS 4.3
CVE-2025-22170
MEDIUM
Jira Align 11.14.0-11.16.0 - Improper Authorization via State Parameter
CVSS 4.3
CVE-2025-22169
MEDIUM
Jira Align 11.14.0-11.16.0 - Improper Authorization via Endpoint Access
CVSS 5.4
CVE-2025-22168
MEDIUM
Jira Align 11.14.0-11.16.0 - Improper Authorization via Private Checklist Endpoint
CVSS 4.3
CVE-2025-53056
MEDIUM
Oracle JD Edwards EnterpriseOne Tools 9.2.0.0-9.2.9.4 - Unauthenticated Improper Authorization via HTTP
CVSS 6.1
CVE-2025-11256
MEDIUM
Kognetiks Chatbot <2.3.5 - Info Disclosure
CVSS 5.3
CVE-2025-11510
MEDIUM
FileBird - WordPress Media Library Folders & File Manager <6.4.9 - ...
CVSS 4.3
CVE-2025-54822
MEDIUM
FortiOS 7.0.0-7.4.1 and FortiProxy 2.0.0-7.4.8 - Authenticated Improper Authorization via Crafted HTTP/HTTPS Requests
CVSS 4.3
CVE-2025-61928
CRITICAL
better-auth < 1.3.26 - Unauthenticated API Key Creation and Modification via User ID Injection
CVE-2025-59271
HIGH
Azure Cache for Redis - Improper Authorization
CVSS 8.7
CVE-2025-61524
HIGH
Casdoor < 2.63.0 - Authenticated Permission Bypass via URL Concatenation
CVSS 7.2
CVE-2025-49594
CRITICAL
XWiki OIDC 2.17.1-2.18.1 - Improper Authorization via User Profile Token Creation
CVE-2025-11321
MEDIUM
zhuimengshaonian wisdom-education <1.0.4 - Auth Bypass
CVSS 4.3
CVE-2025-11272
MEDIUM
SeriaWei ZKEACMS <4.3 - Auth Bypass
CVSS 5.4
CVE-2025-11227
MEDIUM
GiveWP - Donation Plugin - Info Disclosure
CVSS 6.5
CVE-2025-59686
MEDIUM
Kazaar 1.25.12 - Improper Authorization via Order ID Manipulation
CVSS 6.5
CVE-2025-11080
MEDIUM
zhuimengshaonian wisdom-education <1.0.4 - Auth Bypass
CVSS 4.3
CVE-2025-11050
MEDIUM
Portabilis i-Educar <2.10 - Privilege Escalation
CVSS 6.3
CVE-2025-11049
MEDIUM
Portabilis i-Educar <2.10 - Auth Bypass
CVSS 6.3
CVE-2025-11048
MEDIUM
Portabilis i-Educar <2.10 - Info Disclosure
CVSS 6.3
CVE-2025-11047
MEDIUM
Portabilis i-Educar <2.10 - Auth Bypass
CVSS 6.3
CVE-2025-11030
HIGH
Tutorials-Website Employee Management System <611887d8f8375271ce8ab...
CVSS 7.3
Details
Vulnerabilities
1,461
Exploit Likelihood
High