CWE-295

1,397 vulnerabilities with CWE-295

CVE-2022-45856 MEDIUM

FortiClient 5.0-7.2.1, 6.4-7.2.5, 6.4-7.0.8, 2.0-7.0.7 - Unauthenticated MitM via SAML SSO

CVSS 4.8

CVE-2022-32509 HIGH

Nuki Home Solutions <3.3.5-2.13.2 - Info Disclosure

CVSS 8.8

CVE-2022-3761 MEDIUM

OpenVPN Connect < 3.4.0.4506 (macOS) and < 3.4.0.3100 (Windows) - Improper Certificate Validation

CVSS 5.9

CVE-2022-43892 LOW

IBM Security Verify Privilege On-Premises <11.5 - Info Disclosure

CVSS 3.7

CVE-2022-22380 MEDIUM

IBM Security Verify Privilege On-Premises <11.5 - Spoofing

CVSS 5.0

CVE-2022-22305 MEDIUM

FortiManager <7.0.1, FortiAnalyzer <7.0.2, FortiOS <6.4, FortiSandb...

CVSS 5.4

CVE-2022-45458 HIGH

Acronis Agent < 29633 & Cyber Protect 15 < 30984 - Info Disclosure & Manipulation via Cert Validation

CVSS 7.5

CVE-2022-45457 HIGH

Acronis Agent < 29633 & Cyber Protect 15 < 30984 - Sensitive Info Disclosure via Improper Cert Validation

CVSS 7.5

CVE-2022-39161 MEDIUM

IBM WebSphere Application Server 7.0-9.0 & Liberty - Authenticated Spoofing via Improper Certificate Validation

CVSS 4.8

CVE-2022-35898 CRITICAL

OpenText BizManager <16.6.0.1 - Privilege Escalation

CVSS 9.8

CVE-2022-48186 MEDIUM

Lenovo Baiying < 1.1.4 - Improper Certificate Validation

CVSS 6.2

CVE-2022-47758 CRITICAL

Nanoleaf Firmware <= 7.1.1 - Remote Code Execution via DNS Hijacking

CVSS 9.8

CVE-2022-48437 MEDIUM

LibreSSL < 3.6.1 and OpenBSD < 7.2 - Improper Certificate Validation in x509_verify_ctx_add_chain

CVSS 5.3

CVE-2022-27644 HIGH

NETGEAR Multiple Router Firmware - Improper Certificate Validation

CVSS 8.8

CVE-2022-45597 CRITICAL

ComponentSpace SAML 4.4.0 - Improper Certificate Validation

CVSS 9.8

CVE-2022-4895 HIGH

Hitachi Infrastructure Analytics Advisor <4.4.0 - Man in the Middle...

CVSS 8.6

CVE-2022-39948 MEDIUM

FortiOS 6.0.0-7.0.7 and FortiProxy 1.2.0-2.0.8 - Unauthenticated Man-in-the-Middle via Improper Certificate Validation

CVSS 4.8

CVE-2022-48308 MEDIUM

Palantir sls-logging - SSL/TLS Man-in-the-Middle

CVSS 6.3

CVE-2022-48307 MEDIUM

Palantir Magritte-ftp - Man-in-the-Middle via TLS Hostname Validation Failure

CVSS 6.3

CVE-2022-48306 MEDIUM

Palantir Gotham Chat IRC helper <30221005.210011.9242 - Man-in-the-...

CVSS 5.7

CVE-2022-27890 MEDIUM

AtlasDB < 0.730.0 - Man-in-the-Middle via Improper TLS Certificate Hostname Validation

CVSS 6.3

CVE-2022-34404 MEDIUM

Dell System Update < 2.0.1.0 - Improper Certificate Validation in Data Parser Module

CVSS 6.5

CVE-2022-46496 MEDIUM

BTicino Door Entry HOMETOUCH for iOS <1.4.2 - Info Disclosure

CVSS 5.9

CVE-2022-31733 CRITICAL

Cloud Foundry Diego 2.55.0-2.69.0 and CF Deployment 17.1-23.2.0 - Improper Certificate Validation

CVSS 9.1

CVE-2022-3913 MEDIUM

Rapid7 Nexpose 6.6.82-6.6.177 - Improper Certificate Validation in Update Server

CVSS 5.3