CWE-1270 · 8 kayıt
Generation of Incorrect Security Tokens
Bu sınıftaki CVE’ler
8 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2023-2882İstismar yok | Privilege Escalation in CBOT's Chatbotcbot · cbot core · CWE-1270 | Kritik9,8 | — | %0,6 | 25 May 2023 |
37İzleyin | CVE-2023-32188İstismar yok | JWT token compromise can allow malicious actions including Remote Code Execution (RCE)suse · neuvector · CWE-1270 | Kritik9,4 | — | %0,6 | 16 Eki 2024 |
37İzleyin | CVE-2023-22644İstismar yok | JWT token compromise can allow malicious actions including Remote Code Execution (RCE)suse · manager server · CWE-1270 | Kritik9,4 | — | %0,5 | 20 Eyl 2023 |
35İzleyin | CVE-2026-49499İstismar yok | Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM.dell · powerprotect data manager · CWE-1270 | Yüksek8,8 | — | %0,4 | 22 Tem 2026 |
27İzleyin | CVE-2025-59698İstismar yok | Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow aentrust · nshield 5c firmware · CWE-1270 | Orta6,8 | — | %0,3 | 2 Ara 2025 |
24İzleyin | CVE-2026-19636İstismar yok | Insuffucient Protections Lead to Brute Forcetenable · security center · CWE-1270 | Orta6,0 | — | %0,3 | 14 Ağu 2026 |
17İzleyin | CVE-2023-30524İstismar yok | Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the pojenkins · report portal · CWE-1270 | Orta4,3 | — | %0,4 | 12 Nis 2023 |
17İzleyin | CVE-2026-15831İstismar yok | Generation of Incorrect Security Tokens in GitLabgitlab · gitlab · CWE-1270 | Orta4,3 | — | %0,3 | 29 Tem 2026 |
- CVE-2023-288239İzleyin
Privilege Escalation in CBOT's Chatbot
KritikCVSS 9,8İstismar yokEPSS %1cbot · cbot core25 May 2023
- CVE-2023-3218837İzleyin
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
KritikCVSS 9,4İstismar yokEPSS %1suse · neuvector16 Eki 2024
- CVE-2023-2264437İzleyin
JWT token compromise can allow malicious actions including Remote Code Execution (RCE)
KritikCVSS 9,4İstismar yokEPSS %0suse · manager server20 Eyl 2023
- CVE-2026-4949935İzleyin
Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM.
YüksekCVSS 8,8İstismar yokEPSS %0dell · powerprotect data manager22 Tem 2026
- CVE-2025-5969827İzleyin
Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a
OrtaCVSS 6,8İstismar yokEPSS %0entrust · nshield 5c firmware2 Ara 2025
- CVE-2026-1963624İzleyin
Insuffucient Protections Lead to Brute Force
OrtaCVSS 6,0İstismar yokEPSS %0tenable · security center14 Ağu 2026
- CVE-2023-3052417İzleyin
Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the po
OrtaCVSS 4,3İstismar yokEPSS %0jenkins · report portal12 Nis 2023
- CVE-2026-1583117İzleyin
Generation of Incorrect Security Tokens in GitLab
OrtaCVSS 4,3İstismar yokEPSS %0gitlab · gitlab29 Tem 2026