CWE-307

Improper Restriction of Excessive Authentication Attempts

Parent: CWE-1390 - Weak Authentication

The product does not implement sufficient measures to prevent multiple failed authentication attempts within a short time frame.

561 vulnerabilities with CWE-307
CVE-2025-12995 HIGH
Medtronic CareLink Network <December 4, 2025 - Open Redirect
CVSS 8.1
CVE-2025-64310 CRITICAL
EPSON WebConfig - DoS
CVSS 9.8
CVE-2025-63807 CRITICAL
University-BBS <9e06bab430bfc729f27b4284ba7570db3b11ce84 - Auth Bypass
CVSS 9.8
CVE-2025-59113 HIGH
Windu Cms - Brute Force
CVSS 7.5
CVE-2025-11566 MEDIUM
Unknown - Auth Bypass
CVE-2025-10161 HIGH
Turkguven Software Technologies Inc. Perfektive <12574.2701 - Auth ...
CVSS 7.3
CVE-2025-12896 MEDIUM
Solidigm DC Products - Privilege Escalation
CVSS 4.4
CVE-2025-12547 LOW
LogicalDOC Community Edition <9.2.1 - Info Disclosure
CVSS 3.7
CVE-2025-62257 MEDIUM
Liferay Digital Experience Platform < 7.4 - Brute Force
CVSS 5.3
CVE-2025-10928 MEDIUM
Access Code < 2.0.5 - Brute Force
CVSS 6.3
CVE-2025-64102 CRITICAL
Zitadel < 2.71.18 - Brute Force
CVSS 9.8
CVE-2025-12310 MEDIUM
VirtFusion <6.0.2 - Auth Bypass
CVSS 5.3
CVE-2025-60424 HIGH
Nagios Fusion <2024R2 - Auth Bypass
CVSS 7.6
CVE-2025-26862 NONE
PingFederate - Auth Bypass
CVE-2025-62399 HIGH
Moodle < 4.1.21 - Brute Force
CVSS 7.5
CVE-2025-56224 HIGH
Ascertia Signinghub < 8.6.8 - Brute Force
CVSS 8.1
CVE-2025-56221 CRITICAL
Ascertia Signinghub < 8.6.8 - Brute Force
CVSS 9.8
CVE-2025-9551 MEDIUM
Drupal Protected Pages <1.8.0 - Auth Bypass
CVSS 6.5
CVE-2025-11441 LOW
JhumanJ OpnForm <1.9.3 - Auth Bypass
CVSS 3.7
CVE-2025-58587 MEDIUM
Sick Analytics Products - Improper Authentication
CVSS 6.5
CVE-2025-8679 CRITICAL
Extremenetworks Extremeguest Essentials < 25.5.0 - Brute Force
CVSS 9.8
CVE-2025-8118 MEDIUM
Widzialni Pad Cms < 1.2.1 - Brute Force
CVSS 6.5
CVE-2025-36064 MEDIUM
IBM Sterling Connect < 3.1.0.23 - Brute Force
CVSS 5.9
CVE-2025-35041 HIGH
Airship.ai Acropolis < 10.2.35 - Brute Force
CVSS 7.5
CVE-2025-10761 LOW
Harness 3.3.0 - Auth Bypass
CVSS 3.7
Details
Vulnerabilities 561