CWE-285

1,461 vulnerabilities with CWE-285

CVE-2025-10992 MEDIUM

roncoo-pay <9428382af21cd5568319eae7429b7e1d0332ff40 - Auth Bypass

CVSS 5.3

CVE-2025-10989 MEDIUM

RuoYi < 4.8.1 - Improper Authorization via /system/role/authUser/selectAll userIds Parameter

CVSS 6.3

CVE-2025-10988 MEDIUM

YunaiV ruoyi-vue-pro <2025.09 - Auth Bypass

CVSS 6.3

CVE-2025-10987 MEDIUM

YunaiV yudao-cloud <2025.09 - Auth Bypass

CVSS 6.3

CVE-2025-10981 MEDIUM

JeecgBoot < 3.8.2 - Improper Authorization via /sys/tenant/exportXls

CVSS 4.3

CVE-2025-10980 MEDIUM

JeecgBoot < 3.8.2 - Improper Authorization via /sys/position/exportXls

CVSS 4.3

CVE-2025-10979 MEDIUM

JeecgBoot < 3.8.2 - Improper Authorization via /sys/role/exportXls

CVSS 4.3

CVE-2025-10978 MEDIUM

JeecgBoot < 3.8.2 - Improper Authorization in Filter Handler

CVSS 4.3

CVE-2025-10977 LOW

JeecgBoot < 3.8.2 - Improper Authorization via /sys/tenant/deleteBatch ids Parameter

CVSS 3.1

CVE-2025-10976 LOW

JeecgBoot < 3.8.2 - Improper Authorization via DepartId Parameter

CVSS 3.1

CVE-2025-10947 MEDIUM

Sistemas Pleno Gestão de Locação <2025.7.x - Auth Bypass

CVSS 5.3

CVE-2025-59305 HIGH

Langfuse 3.1-3.108.0 - Authenticated Improper Authorization via TRPC Background Migration Endpoints

CVSS 7.6

CVE-2025-10822 MEDIUM

fuyang_lipengjun platform 1.0 - Improper Authorization in SysSmsLogController

CVSS 4.3

CVE-2025-10821 MEDIUM

fuyang_lipengjun platform 1.0 - Improper Authorization in TopicCategoryController

CVSS 4.3

CVE-2025-10820 MEDIUM

fuyang_lipengjun platform 1.0 - Incorrect Privilege Assignment in TopicController

CVSS 4.3

CVE-2025-10819 MEDIUM

fuyang_lipengjun platform 1.0 - Improper Authorization in UserCouponController

CVSS 4.3

CVE-2025-57438 MEDIUM

2wcom IP-4c 2.15.5 - Broken Access Control via Request Manipulation

CVSS 6.8

CVE-2025-10759 MEDIUM

Webkul QloApps < 1.7.0 - Authorization Bypass via CSRF Token Manipulation

CVSS 5.3

CVE-2025-8532 MEDIUM

Bimser Solution Software Trade Inc. EBA Document and Workflow Manag...

CVSS 6.4

CVE-2025-10707 MEDIUM

JeecgBoot < 3.8.2 - Improper Authorization via /message/sysMessageTemplate/sendMsg

CVSS 6.3

CVE-2025-10676 MEDIUM

fuyang_lipengjun platform 1.0 - Incorrect Privilege Assignment in BrandController

CVSS 4.3

CVE-2025-10675 MEDIUM

fuyang_lipengjun platform 1.0 - Incorrect Privilege Assignment in AttributeController

CVSS 4.3

CVE-2025-10674 MEDIUM

fuyang_lipengjun platform 1.0 - Improper Authorization in AttributeCategoryController

CVSS 4.3

CVE-2025-8057 MEDIUM

Patika Global Technologies HumanSuite <53.21.0 - Auth Bypass

CVSS 6.5

CVE-2025-41249 HIGH

Spring Framework 5.3.0-5.3.44, 6.1.0-6.1.22, 6.2.0-6.2.10 - Improper Authorization via Annotation Detection Mechanism

CVSS 7.5