The product does not perform or incorrectly performs an authorization check when an actor attempts to access a resource or perform an action.
1,330 vulnerabilities with CWE-285
CVE-2019-7479
HIGH
SonicOS <6.9.1.12-4o - Privilege Escalation
CVSS 7.2
CVE-2019-7489
CRITICAL
SonicWall Email Security <10.0.2 - RCE
CVSS 9.8
CVE-2019-18827
MEDIUM
Barco ClickShare Button R9861500D01 <1.9.0 - Info Disclosure
CVSS 5.9
CVE-2019-14870
MEDIUM
Samba 4.x.x < 4.9.17, 4.10.x < 4.10.11, 4.11.x < 4.11.3 - Improper Authentication via S4U Kerberos Delegation
CVSS 5.4
CVE-2019-15990
MEDIUM
Cisco Small Business RV Series Routers - Info Disclosure
CVSS 5.3
CVE-2019-3641
MEDIUM
McAfee Threat Intelligence Exchange Server 3.0.0 - Authenticated Reputation Data Modification via API
CVSS 4.5
CVE-2019-3764
MEDIUM
Dell iDRAC7 < 2.65.65.65, iDRAC8 < 2.70.70.70, iDRAC9 < 3.36.36.36 - Authenticated Information Disclosure
CVSS 4.3
CVE-2019-17631
CRITICAL
Eclipse OpenJ9 0.15.0-0.16.0 - Unauthenticated Improper Privilege Management
CVSS 9.1
CVE-2019-12671
HIGH
Cisco IOS XE - Authenticated Shell Access Bypass via Insufficient Consent Token Enforcement
CVSS 7.8
CVE-2019-13528
MEDIUM
Niagara AX and Niagara 4 - Unauthenticated Privileged File Read Access
CVSS 4.4
CVE-2019-13550
CRITICAL
Advantech WebAccess < 8.4.1 - Improper Authorization
CVSS 9.8
CVE-2019-12635
MEDIUM
Cisco Content Security Management Appliance < 12.5.0 - Authenticated Improper Authorization
CVSS 4.3
CVE-2019-1907
HIGH
Cisco IMC Supervisor < 4.0(4b) - Authenticated Privilege Escalation
CVSS 8.8
CVE-2019-1863
HIGH
Cisco IMC Software - Privilege Escalation
CVSS 8.1
CVE-2019-13416
MEDIUM
Search Guard < 24.3 - Improper Authorization via Cross Cluster Search
CVSS 6.5
CVE-2019-1934
HIGH
Cisco Adaptive Security Appliance Software < 8.2 - Authenticated Privilege Escalation via HTTPS Requests
CVSS 8.8
CVE-2019-1912
CRITICAL
Cisco Small Business 220 Series Smart Switches < 1.1.4.4 - Arbitrary File Upload
CVSS 9.1
CVE-2019-2386
HIGH
MongoDB Server <4.0.9, <3.6.13, <3.4.22 - Info Disclosure
CVSS 7.1
CVE-2019-10154
HIGH
Moodle <3.7-3.6.4 - Info Disclosure
CVSS 7.5
CVE-2019-1899
MEDIUM
Cisco RV110W/RV130W/RV215W - Info Disclosure
CVSS 5.3
CVE-2019-1898
MEDIUM
Cisco RV110W, RV130W, and RV215W - Info Disclosure
CVSS 5.3
CVE-2019-1897
MEDIUM
Cisco RV110W, RV130W, RV215W - DoS
CVSS 5.3
CVE-2019-10159
MEDIUM
cfme-gemset <5.10.4.3 & <5.9.9.3 - Info Disclosure
CVSS 4.3
CVE-2019-6582
HIGH
Siveillance VMS <13.1a Authenticated Improper Authorization
CVSS 7.1
CVE-2019-6581
HIGH
Siveillance VMS <13.1a Authenticated Improper Authorization
CVSS 8.8
Details
Vulnerabilities
1,330
Exploit Likelihood
High