CWE-732
High likelihoodIncorrect Permission Assignment for Critical Resource
Parent: CWE-285 - Improper Authorization
The product specifies permissions for a security-critical resource in a way that allows that resource to be read or modified by unintended actors.
1,622 vulnerabilities with CWE-732
CVE-2023-35800
MEDIUM
Stormshield Endpoint Security - Incorrect Permission Assignment
CVSS 4.3
CVE-2023-35799
MEDIUM
Stormshield Endpoint Security - Incorrect Permission Assignment
CVSS 5.5
CVE-2023-35168
MEDIUM
Dataease < 1.18.8 - Incorrect Permission Assignment
CVSS 6.5
CVE-2023-29860
HIGH
Dtstack Taier - Incorrect Permission Assignment
CVSS 7.5
CVE-2023-34981
HIGH
Apache Tomcat < 11.0.0-M6 - Incorrect Permission Assignment
CVSS 7.5
CVE-2023-26427
LOW
Properties File - Info Disclosure
CVSS 3.2
CVE-2023-34154
HIGH
HUAWEI VR - Privilege Escalation
CVSS 8.2
CVE-2023-34797
MEDIUM
Temenos Cwx - Incorrect Permission Assignment
CVSS 5.4
CVE-2023-34852
CRITICAL
Publiccms < 4.0.202302 - Incorrect Permission Assignment
CVSS 9.8
CVE-2023-21142
MEDIUM
Google Android - Incorrect Permission Assignment
CVSS 5.5
CVE-2023-35147
MEDIUM
Jenkins Aws Codecommit Trigger - Incorrect Permission Assignment
CVSS 6.5
CVE-2023-31142
LOW
Discourse <3.0.4-3.1.0.beta5 - Info Disclosure
CVSS 2.0
CVE-2023-33695
HIGH
Hutool <5.8.17 - Info Disclosure
CVSS 7.1
CVE-2023-31238
MEDIUM
SICAM P850 <V3.11 - Info Disclosure
CVSS 5.5
CVE-2023-30897
HIGH
Siemens Wincc < 7.5.2.13 - Incorrect Permission Assignment
CVSS 7.8
CVE-2023-2876
LOW
ABB REX640 - XSS
CVSS 3.1
CVE-2023-32114
LOW
SAP Netweaver - Incorrect Permission Assignment
CVSS 2.7
CVE-2023-28399
HIGH
Contec Conprosys Hmi System < 3.5.3 - Incorrect Permission Assignment
CVSS 7.8
CVE-2023-28346
HIGH
Faronics Insight - Incorrect Permission Assignment
CVSS 7.3
CVE-2023-31874
HIGH
Yank Note <3.52.1 - RCE
CVSS 8.8
CVE-2023-31748
HIGH
MobileTrans <4.0.11 - Privilege Escalation
CVSS 7.8
CVE-2023-31454
HIGH
Apache InLong <1.7.0 - Privilege Escalation
CVSS 7.5
CVE-2023-31453
HIGH
Apache InLong <1.7.0 - Privilege Escalation
CVSS 7.5
CVE-2023-33251
MEDIUM
Akka HTTP <10.5.2 - Info Disclosure
CVSS 4.7
CVE-2023-1692
HIGH
Window Management Module - Info Disclosure
CVSS 7.5
Details
Vulnerabilities
1,622
Exploit Likelihood
High