CWE-306

High likelihood

Missing Authentication for Critical Function

Parent: CWE-287 - Improper Authentication

The product does not perform any authentication for functionality that requires a provable user identity or consumes a significant amount of resources.

2,436 vulnerabilities with CWE-306
CVE-2023-21837 HIGH
Oracle WebLogic Server <14.1.1.0.0 - RCE
CVSS 7.5
CVE-2023-21743 MEDIUM
Microsoft SharePoint Server - Privilege Escalation
CVSS 5.3
CVE-2022-50981 CRITICAL
Innomic and Avibia VibroLine Devices - Default Password Full Access
CVSS 9.8
CVE-2022-50980 MEDIUM
Innomic VibroLine and AvibiaLine - CAN Preset Switching Denial of Service
CVSS 6.5
CVE-2022-50979 MEDIUM
Innomic VibroLine VLX HD 5.0 - Unauthenticated Configuration Preset Switch via Modbus
CVSS 6.5
CVE-2022-50978 HIGH
Innomic VibroLine VLX1/2/4/6/8 HD 5.0 - Unauthenticated Configuration Preset Switch via Modbus TCP
CVSS 7.5
CVE-2022-50977 HIGH
Innomic VibroLine and AvibiaLine - Unauthenticated Config Preset Switching
CVSS 7.5
CVE-2022-50790 HIGH
SOUND4 IMPACT/FIRST/PULSE/Eco <2 - Info Disclosure
CVSS 7.5
CVE-2022-50595 HIGH
Advantech iView <5.7.04 build 6425 - Auth Bypass, SQL Injection
CVSS 7.2
CVE-2022-50594 HIGH
Advantech iView <5.7.04 build 6425 - Auth Bypass
CVSS 7.5
CVE-2022-50593 CRITICAL
Advantech iView <5.7.04 build 6425 - Auth Bypass, SQL Injection
CVSS 9.8
CVE-2022-50592 HIGH
Advantech iView <5.7.04 build 6425 - Auth Bypass, SQL Injection
CVSS 7.2
CVE-2022-50591 CRITICAL
Advantech iView <5.7.04 build 6425 - Auth Bypass
CVSS 9.8
CVE-2022-4980 CRITICAL
General Bytes Crypto Application Server <20220531.38-20220725.22 - ...
CVE-2022-43110 CRITICAL
Voltronic Power ViewPower <1.04-21353 & PowerShield Netguard <1.04-...
CVSS 9.8
CVE-2022-4978 CRITICAL
Remote Control Server 3.1.1.12 - RCE
CVE-2022-23862 HIGH
Y Soft SAFEQ 6 Build 53 - Privilege Escalation
CVSS 7.8
CVE-2022-25770 HIGH
Mautic < 4.4.13 - Unauthenticated Application Update via Upgrade Script
CVSS 7.8
CVE-2022-32503 HIGH
Nuki Home Solutions <1.9.2-1.8.1 - Privilege Escalation
CVSS 7.6
CVE-2022-38057 MEDIUM
ThemeHunk Advance WP Search <1.2.1 - Info Disclosure
CVSS 6.5
CVE-2022-34321 HIGH
Apache Pulsar 2.6.0-2.10.5, 2.11.0-2.11.2, 3.0.0-3.0.1, 3.1.0 - Info Exposure & DoS via /proxy-stats
CVSS 8.2
CVE-2022-48621 HIGH
Huawei EMUI and HarmonyOS - Missing Authentication for Critical Function in Wi-Fi Module
CVSS 7.5
CVE-2022-45794 HIGH
Omron SYSMAC CJ2H CPU66 Firmware - Unauthenticated File Read and Write via Network Protocol
CVSS 8.6
CVE-2022-43555 HIGH
Ivanti Avalanche Printer Device Service - Privilege Escalation
CVSS 7.8
CVE-2022-43554 HIGH
Ivanti Avalanche Smart Device Service - Privilege Escalation
CVSS 7.8
Details
Vulnerabilities 2,436
Exploit Likelihood High
Links
MITRE CWE Entry Search this CWE With Exploits