TYPE DE FAIBLESSE

CWE-602

10 CVE, des plus récentes aux plus anciennes. Définition MITRE de CWE-602 (en anglais) →

CVE-2026-23859Les versions de Dell Wyse Management Suite antérieures à la version 5.5 sont affectées par une faille de contournement de sécurité. Un attaquant disposant de privilèges administrat… 2.7 FAIBLE

CVE-2025-36410Les utilisateurs d'IBM ApplinX 11.1 sont concernés par une faille où les contrôles de sécurité sont gérés côté client plutôt que côté serveur. Un utilisateur authentifié disposant … 3.1 FAIBLE

CVE-2025-36102IBM Controller 11.1.0 through 11.1.1 and IBM Cognos Controller 11.0.0 through 11.0.1 FP6 could allow a privileged user to bypass validation, passing user input into the application… 2.7 FAIBLE

CVE-2025-2139IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete reviews from other users due to client-side enfo… 3.5 FAIBLE

CVE-2025-2138IBM Engineering Requirements Management Doors Next 7.0.2, 7.0.3, and 7.1 could allow an authenticated user on the network to delete comments from other users due to client-side e… 3.5 FAIBLE

CVE-2025-8792A vulnerability classified as problematic has been found in LitmusChaos Litmus up to 3.19.0. Affected is an unknown function. The manipulation leads to client-side enforcement of s… 2.1 FAIBLE

CVE-2025-4527A security flaw has been discovered in Dígitro NGC Explorer up to 3.48.21. The impacted element is an unknown function of the component Password Transmission Handler. Performing a … 2.9 FAIBLE

CVE-2024-52008Fides is an open-source privacy engineering platform. The user invite acceptance API endpoint lacks server-side password policy enforcement, allowing users to set arbitrarily weak … 2.0 FAIBLE

CVE-2024-6620Honeywell PC42t, PC42tp, and PC42d Printers, T10.19.020016 to T10.20.060398, contain a cross-site scripting vulnerability. A(n) attacker could potentially inject malicious code whi… 3.5 FAIBLE

CVE-2021-21544Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability. A remote authenticated malicious user with high privileges could potentially exploit … 2.7 FAIBLE