CWE-295

Improper Certificate Validation

Parent: CWE-287 - Improper Authentication

The product does not validate, or incorrectly validates, a certificate.

1,454 vulnerabilities with CWE-295
CVE-2025-30000 MEDIUM
Siemens License Server <V4.3 - Privilege Escalation
CVSS 6.7
CVE-2025-0254 MEDIUM
HCL Digital Experience <9.5 CF226 - SSRF
CVSS 5.9
CVE-2025-23118 MEDIUM
UniFi Protect < - Privilege Escalation
CVSS 6.4
CVE-2025-1001 MEDIUM
Medixant RadiAnt DICOM Viewer - MITM
CVSS 5.7
CVE-2025-1002 MEDIUM
MicroDicom DICOM Viewer 2024.03 - MITM
CVSS 5.7
CVE-2025-1193 HIGH
Devolutions Remote Desktop Manager < 2024.3.20.0 - Improper Certificate Validation
CVSS 8.1
CVE-2025-23114 CRITICAL
Veeam Backup for AWS < 7.0 - Remote Code Execution via TLS Certificate Validation Failure
CVSS 9.0
CVE-2025-1014 HIGH
Firefox < 128.7.0 and < 135.0 - Improper Certificate Validation
CVSS 8.8
CVE-2025-23091 MEDIUM
Ubiquiti UniFi OS < 4.1.13 - Improper Certificate Validation
CVSS 5.9
CVE-2025-0501 HIGH
Amazon WorkSpaces - Man-In-The-Middle
CVSS 7.5
CVE-2025-0500 HIGH
Amazon WorkSpaces, AppStream, and DCV Clients - Certificate Validation Session Exposure
CVSS 7.5
CVE-2025-20126 MEDIUM
Cisco ThousandEyes Endpoint Agent - Info Disclosure
CVSS 4.8
CVE-2025-0239 MEDIUM
Firefox < 134 & Thunderbird < 128.6 - SSL Validation
CVSS 4.0
CVE-2024-47477 MEDIUM
Dell PowerFlex Manager - Improper Certificate Validation
CVSS 6.5
CVE-2024-14024 MEDIUM
QNAP Video Station 5.0.0-5.8.1 - Improper Certificate Validation
CVSS 6.7
CVE-2024-13990 CRITICAL
MicroWorld eScan AV - Unauthenticated Remote Code Execution via Update Mechanism Man-in-the-Middle Attack
CVE-2024-31854 HIGH
SICAM TOOLBOX II < V07.11 - Man-in-the-Middle
CVSS 8.1
CVE-2024-31853 HIGH
SICAM TOOLBOX II < V07.11 - Man-in-the-Middle
CVSS 8.1
CVE-2024-13956 MEDIUM
ASPECT <3.* - SSL Verification Bypass
CVSS 6.7
CVE-2024-45641 MEDIUM
IBM Security ReaQta EDR 3.12-3.12.16 - Improper SSL Certificate Validation
CVSS 6.5
CVE-2024-47619 HIGH
syslog-ng < 4.8.2 - Improper Certificate Validation in TLS Wildcard Matching
CVSS 7.5
CVE-2024-42193 HIGH
HCL BigFix Platform 10.0.0-10.0.12 - Improper Certificate Validation
CVSS 8.1
CVE-2024-10445 MEDIUM
Synology BeeStation OS < 1.1-65374 and DiskStation Manager < 6.2.4-25556-8 - Improper Certificate Validation
CVSS 4.3
CVE-2024-10444 HIGH
Synology DiskStation Manager < 7.1.1-42962-8 - Improper Certificate Validation in LDAP Utilities
CVSS 7.5
CVE-2024-40590 MEDIUM
FortiPortal <7.4.0 - Info Disclosure
CVSS 4.8
Details
Vulnerabilities 1,454