CWE-298 · 8 records
Improper Validation of Certificate Expiration
CVEs in this class
8 records
| Action | CVE | Vulnerability | Severity | KEV | EPSS | Published |
|---|---|---|---|---|---|---|
40Plan | CVE-2025-67109No exploit | Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and executeclipse · cyclone data distribution service · CWE-298 | Critical10.0 | — | 0.3% | Dec 23, 2025 |
40Plan | CVE-2025-67108No exploit | eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connecteprosima · fast dds · CWE-298 | Critical10.0 | — | 0.3% | Dec 23, 2025 |
28Monitor | CVE-2025-61736No exploit | iSTAR- Improper Validation of Certificate Expirationjohnson controls · istarex, istar edge, istar ultra lt, istar ultra , istar ultra se · CWE-298 | High7.1 | — | 0.1% | Dec 17, 2025 |
26Monitor | CVE-2023-42446No exploit | Pow Mnesia cache doesn't invalidate all expired keys on startuppowauth · pow · CWE-298 | Medium6.5 | — | 0.5% | Sep 18, 2023 |
24Monitor | CVE-2025-4384No exploit | Certificate validity not properly verifiedarcinfo · pcvue · CWE-298 | Medium6.0 | — | 0.1% | May 6, 2025 |
22Monitor | CVE-2025-59036No exploit | Infrahub allows authentication with deleted and expired API tokensopsmill · infrahub · CWE-298 | Medium5.5 | — | 0.1% | Sep 9, 2025 |
21Monitor | CVE-2024-1248No exploit | Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalationwso2 · api manager · CWE-298 | Medium5.3 | — | 0.3% | Jul 4, 2026 |
11Monitor | CVE-2026-86231No exploit | mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocationmwiede · jsch · CWE-298 | Low2.9 | — | 0.4% | Sep 6, 2026 |
- CVE-2025-6710940Plan
Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execut
CriticalCVSS 10.0No exploitEPSS 0%eclipse · cyclone data distribution serviceDec 23, 2025
- CVE-2025-6710840Plan
eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connect
CriticalCVSS 10.0No exploitEPSS 0%eprosima · fast ddsDec 23, 2025
- CVE-2025-6173628Monitor
iSTAR- Improper Validation of Certificate Expiration
HighCVSS 7.1No exploitEPSS 0%johnson controls · istarex, istar edge, istar ultra lt, istar ultra , istar ultra seDec 17, 2025
- CVE-2023-4244626Monitor
Pow Mnesia cache doesn't invalidate all expired keys on startup
MediumCVSS 6.5No exploitEPSS 0%powauth · powSep 18, 2023
- CVE-2025-438424Monitor
Certificate validity not properly verified
MediumCVSS 6.0No exploitEPSS 0%arcinfo · pcvueMay 6, 2025
- CVE-2025-5903622Monitor
Infrahub allows authentication with deleted and expired API tokens
MediumCVSS 5.5No exploitEPSS 0%opsmill · infrahubSep 9, 2025
- CVE-2024-124821Monitor
Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege Escalation
MediumCVSS 5.3No exploitEPSS 0%wso2 · api managerJul 4, 2026
- CVE-2026-8623111Monitor
mwiede jsch KnownHosts.java getRevokedKeys improper check for certificate revocation
LowCVSS 2.9No exploitEPSS 0%mwiede · jschSep 6, 2026