CWE-156 · 5 records

Improper Neutralization of Whitespace

CVEs in this class

5 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
32Monitor	CVE-2025-6013No exploit	Vault LDAP MFA Enforcement Bypass When Using Username As Aliashashicorp · vault · CWE-156	High8.1	—	0.5%	Aug 6, 2025
26Monitor	CVE-2025-6014No exploit	Vault TOTP Secrets Engine Code Reusehashicorp · vault · CWE-156	Medium6.5	—	0.4%	Aug 1, 2025
26Monitor	CVE-2025-55001No exploit	OpenBao LDAP MFA Enforcement Bypass When Using Username As Aliasopenbao · openbao · CWE-156	Medium6.5	—	0.2%	Aug 8, 2025
26Monitor	CVE-2025-55000No exploit	OpenBao TOTP Secrets Engine Enables Code Reuseopenbao · openbao · CWE-156	Medium6.5	—	0.2%	Aug 8, 2025
21Monitor	CVE-2025-55127No exploit	HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new uaquaplatform · revive adserver · CWE-156	Medium5.4	—	0.2%	Nov 20, 2025

CVE-2025-6013
32Monitor
Vault LDAP MFA Enforcement Bypass When Using Username As Alias
HighCVSS 8.1No exploitEPSS 0%
hashicorp · vaultAug 6, 2025
CVE-2025-6014
26Monitor
Vault TOTP Secrets Engine Code Reuse
MediumCVSS 6.5No exploitEPSS 0%
hashicorp · vaultAug 1, 2025
CVE-2025-55001
26Monitor
OpenBao LDAP MFA Enforcement Bypass When Using Username As Alias
MediumCVSS 6.5No exploitEPSS 0%
openbao · openbaoAug 8, 2025
CVE-2025-55000
26Monitor
OpenBao TOTP Secrets Engine Enables Code Reuse
MediumCVSS 6.5No exploitEPSS 0%
openbao · openbaoAug 8, 2025
CVE-2025-55127
21Monitor
HackerOne community member Dao Hoang Anh (yoyomiski) has reported an improper neutralization of whitespace in the username when adding new u
MediumCVSS 5.4No exploitEPSS 0%
aquaplatform · revive adserverNov 20, 2025