CVE Database

9+ vulnerabilities with CVSS scores, EPSS exploit predictions, and CISA KEV status. Updated daily.

Filter: All CRITICAL HIGH MEDIUM LOW CISA KEV
Sort: Newest CVSS EPSS

9 results for "CWE-287"

CVE-2025-53845
6.5 MEDIUM

An improper authentication vulnerability [CWE-287] in Fortinet FortiAnalyzer version 7.6.0 through 7.6.3 and before 7.4.6 allows an unauthenticated attacker to obtain information pertaining to the …

Oct 14, 2025
CVE-2025-10224
5.4 MEDIUM

Improper Authentication (CWE-287) in the LDAP authentication engine in AxxonSoft Axxon One (C-Werk) 2.0.2 and earlier on Windows allows a remote authenticated user to be …

Sep 10, 2025
CVE-2024-32119
4.8 MEDIUM

An improper authentication vulnerability [CWE-287] in Fortinet FortiClientEMS version 7.4.0 and before 7.2.4 allows an unauthenticated attacker with the knowledge of the targeted user's FCTUID …

Jun 10, 2025
CVE-2025-0813
6.8 MEDIUM

CWE-287: Improper Authentication vulnerability exists that could cause an Authentication Bypass when an unauthorized user without permission rights has physical access to the EPAS-UI computer …

Mar 12, 2025
CVE-2024-10511
5.3 MEDIUM

CWE-287: Improper Authentication vulnerability exists that could cause Denial of access to the web interface when someone on the local network repeatedly requests the /accessdenied …

Dec 11, 2024
CVE-2024-42336
8.2 HIGH

Servision - CWE-287: Improper Authentication

Aug 20, 2024
CVE-2024-27767
10.0 CRITICAL

CWE-287: Improper Authentication may allow Authentication Bypass

Mar 18, 2024
CVE-2023-46717
7.5 HIGH

An improper authentication vulnerability [CWE-287] in FortiOS versions 7.4.1 and below, versions 7.2.6 and below, and versions 7.0.12 and below when configured with FortiAuthenticator in …

Mar 12, 2024
CVE-2024-0568
8.8 HIGH

CWE-287: Improper Authentication vulnerability exists that could cause unauthorized tampering of device configuration over NFC communication.

Feb 14, 2024

Scan your infrastructure for known CVEs

Free website and port scanning — find vulnerabilities before attackers do.