CWE-1270 · 8 records

Generation of Incorrect Security Tokens

CVEs in this class

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
39Monitor	CVE-2023-2882No exploit	Privilege Escalation in CBOT's Chatbotcbot · cbot core · CWE-1270 Pre-auth	Critical9.8	—	0.6%	May 25, 2023
37Monitor	CVE-2023-32188No exploit	JWT token compromise can allow malicious actions including Remote Code Execution (RCE)suse · neuvector · CWE-1270 RCE	Critical9.4	—	0.5%	Oct 16, 2024
37Monitor	CVE-2023-22644No exploit	JWT token compromise can allow malicious actions including Remote Code Execution (RCE)suse · manager server · CWE-1270 RCE	Critical9.4	—	0.4%	Sep 20, 2023
35Monitor	CVE-2026-49499No exploit	Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM.dell · powerprotect data manager · CWE-1270	High8.8	—	0.4%	Jul 22, 2026
27Monitor	CVE-2025-59698No exploit	Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow aentrust · nshield 5c firmware · CWE-1270	Medium6.8	—	0.3%	Dec 2, 2025
24Monitor	CVE-2026-19636No exploit	Insuffucient Protections Lead to Brute Forcetenable · security center · CWE-1270 Pre-auth CSRF	Medium6.0	—	0.2%	Aug 14, 2026
17Monitor	CVE-2023-30524No exploit	Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the pojenkins · report portal · CWE-1270	Medium4.3	—	0.4%	Apr 12, 2023
17Monitor	CVE-2026-15831No exploit	Generation of Incorrect Security Tokens in GitLabgitlab · gitlab · CWE-1270	Medium4.3	—	0.3%	Jul 29, 2026

CVE-2023-2882
39Monitor
Privilege Escalation in CBOT's Chatbot
CriticalCVSS 9.8No exploitEPSS 0%
- Pre-auth
cbot · cbot coreMay 25, 2023
CVE-2023-32188
37Monitor
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
suse · neuvectorOct 16, 2024
CVE-2023-22644
37Monitor
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
CriticalCVSS 9.4No exploitEPSS 0%
- RCE
suse · manager serverSep 20, 2023
CVE-2026-49499
35Monitor
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM.
HighCVSS 8.8No exploitEPSS 0%
dell · powerprotect data managerJul 22, 2026
CVE-2025-59698
27Monitor
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a
MediumCVSS 6.8No exploitEPSS 0%
entrust · nshield 5c firmwareDec 2, 2025
CVE-2026-19636
24Monitor
Insuffucient Protections Lead to Brute Force
MediumCVSS 6.0No exploitEPSS 0%
- Pre-auth
- CSRF
tenable · security centerAug 14, 2026
CVE-2023-30524
17Monitor
Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the po
MediumCVSS 4.3No exploitEPSS 0%
jenkins · report portalApr 12, 2023
CVE-2026-15831
17Monitor
Generation of Incorrect Security Tokens in GitLab
MediumCVSS 4.3No exploitEPSS 0%
gitlab · gitlabJul 29, 2026

All vulnerability classes