CWE-297 · 84 kayıt
Improper Validation of Certificate with Host Mismatch
Bu sınıftaki CVE’ler
84 kayıt
| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2025-46408Kavram kanıtı | An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpCavtech · eagleeyes\(lite\) · CWE-297 | Kritik9,8 | — | %0,6 | 15 Eyl 2025 |
37İzleyin | CVE-2026-59638İstismar yok | JSSE hostname verifier CN-fallback enabled by default despite documented opt-inbouncycastle · bc-java · CWE-297 | Kritik9,3 | — | %0,3 | 2 Ağu 2026 |
37İzleyin | CVE-2026-47840İstismar yok | LDAP StartTLS unconditionally disables hostname verificationcloudfoundry foundation · uaa · CWE-297 | Kritik9,3 | — | %0,2 | 9 Tem 2026 |
36İzleyin | CVE-2020-1887İstismar yok | Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffilinuxfoundation · osquery · CWE-297 | Kritik9,1 | — | %1,5 | 12 Mar 2020 |
36İzleyin | CVE-2021-33695İstismar yok | Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.sap · cloud connector · CWE-297 | Kritik9,1 | — | %0,5 | 15 Eyl 2021 |
36İzleyin | CVE-2026-48144İstismar yok | Apache Thrift: c_glib TLS Client Missing Hostname Verificationapache · thrift · CWE-297 | Kritik9,1 | — | %0,4 | 27 Tem 2026 |
36İzleyin | CVE-2026-92943İstismar yok | Improper validation of certificate with host mismatch in AWS IoT Device SDK for Pythonaws · awsiotpythonsdk · CWE-297 | Kritik9,2 | — | %0,3 | 17 Eyl 2026 |
36İzleyin | CVE-2026-26214İstismar yok | Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITMxiaomi technology co., ltd. · galaxy fds android sdk · CWE-297 | Kritik9,1 | — | %0,3 | 12 Şub 2026 |
36İzleyin | CVE-2026-15925İstismar yok | Improper TLS Hostname Verification in Snowflake Connector for Pythonsnowflake · snowflake connector for python · CWE-297 | Kritik9,2 | — | %0,2 | 16 Tem 2026 |
36İzleyin | CVE-2025-68637İstismar yok | Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Clientapache · uniffle · CWE-297 | Kritik9,1 | — | %0,2 | 7 Oca 2026 |
36İzleyin | CVE-2026-88647İstismar yok | A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communicCWE-297 | Kritik9,1 | — | %0,2 | 8 Eki 2026 |
36İzleyin | CVE-2026-107938İstismar yok | Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.apache · cxf · CWE-297 | Kritik9,1 | — | %0,2 | 9 Eki 2026 |
35İzleyin | CVE-2026-35563İstismar yok | Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostnameapache · directory ldap api · CWE-297 | Yüksek8,8 | — | %0,2 | 1 Haz 2026 |
34İzleyin | CVE-2026-62243İstismar yok | Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypassnetty · netty · CWE-297 | Yüksek8,7 | — | %0,1 | 22 Ağu 2026 |
33İzleyin | CVE-2018-10936Kavram kanıtı | A weakness was found in postgresql-jdbc before version 42.2.5.postgresql · postgresql jdbc driver · CWE-297 | Yüksek8,1 | — | %2,9 | 30 Ağu 2018 |
32İzleyin | CVE-2022-32153İstismar yok | Splunk Enterprise lacked TLS host name validationsplunk · splunk · CWE-297 | Yüksek8,1 | — | %0,9 | 15 Haz 2022 |
32İzleyin | CVE-2020-11050İstismar yok | Improper Validation of Certificate with Host Mismatch in Java-WebSocketjava-websocket project · java-websocket · CWE-297 | Yüksek8,1 | — | %0,7 | 7 May 2020 |
32İzleyin | CVE-2025-3501İstismar yok | Org.keycloak.protocol.services: keycloak hostname verificationred hat · red hat build of keycloak · CWE-297 | Yüksek8,2 | — | %0,4 | 29 Nis 2025 |
32İzleyin | CVE-2024-32868İstismar yok | ZITADEL's Improper Lockout Mechanism Leads to MFA Bypasszitadel · zitadel · CWE-297 | Yüksek8,1 | — | %0,4 | 25 Nis 2024 |
32İzleyin | CVE-2026-48145İstismar yok | Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypassapache · thrift · CWE-297 | Yüksek8,2 | — | %0,4 | 27 Tem 2026 |
32İzleyin | CVE-2024-49782İstismar yok | IBM OpenPages improper certificate validationibm · openpages with watson · CWE-297 | Yüksek8,2 | — | %0,3 | 20 Şub 2025 |
32İzleyin | CVE-2025-2190İstismar yok | The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.tecno · com.transsnet.store · CWE-297 | Yüksek8,1 | — | %0,3 | 11 Mar 2025 |
32İzleyin | CVE-2026-22747Kavram kanıtı | Unauthorized User Impersonation when Using X.509 Client Certificatesvmware · spring security · CWE-297 | Yüksek8,1 | — | %0,2 | 22 Nis 2026 |
32İzleyin | CVE-2026-84393İstismar yok | A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.fortinet · fortios · CWE-297 | Yüksek8,1 | — | %0,2 | 8 Eyl 2026 |
32İzleyin | CVE-2023-34143İstismar yok | Improper Validation of Certificate Vulnerability in Hitachi Device Managerhitachi · device manager · CWE-297 | Yüksek8,1 | — | %0,2 | 17 Tem 2023 |
- CVE-2025-4640839İzleyin
An issue was discovered in the methods push.lite.avtech.com.AvtechLib.GetHttpsResponse and push.lite.avtech.com.Push_HttpService.getNewHttpC
KritikCVSS 9,8Kavram kanıtıEPSS %0avtech · eagleeyes\(lite\)15 Eyl 2025
- CVE-2026-5963837İzleyin
JSSE hostname verifier CN-fallback enabled by default despite documented opt-in
KritikCVSS 9,3İstismar yokEPSS %0bouncycastle · bc-java2 Ağu 2026
- CVE-2026-4784037İzleyin
LDAP StartTLS unconditionally disables hostname verification
KritikCVSS 9,3İstismar yokEPSS %0cloudfoundry foundation · uaa9 Tem 2026
- CVE-2020-188736İzleyin
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffi
KritikCVSS 9,1İstismar yokEPSS %1linuxfoundation · osquery12 Mar 2020
- CVE-2021-3369536İzleyin
Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate.
KritikCVSS 9,1İstismar yokEPSS %0sap · cloud connector15 Eyl 2021
- CVE-2026-4814436İzleyin
Apache Thrift: c_glib TLS Client Missing Hostname Verification
KritikCVSS 9,1İstismar yokEPSS %0apache · thrift27 Tem 2026
- CVE-2026-9294336İzleyin
Improper validation of certificate with host mismatch in AWS IoT Device SDK for Python
KritikCVSS 9,2İstismar yokEPSS %0aws · awsiotpythonsdk17 Eyl 2026
- CVE-2026-2621436İzleyin
Xiaomi Galaxy FDS Android SDK <= 3.0.8 TLS Hostname Verification Disabled Enables MITM
KritikCVSS 9,1İstismar yokEPSS %0xiaomi technology co., ltd. · galaxy fds android sdk12 Şub 2026
- CVE-2026-1592536İzleyin
Improper TLS Hostname Verification in Snowflake Connector for Python
KritikCVSS 9,2İstismar yokEPSS %0snowflake · snowflake connector for python16 Tem 2026
- CVE-2025-6863736İzleyin
Apache Uniffle: Insecure SSL Configuration in Uniffle HTTP Client
KritikCVSS 9,1İstismar yokEPSS %0apache · uniffle7 Oca 2026
- CVE-2026-8864736İzleyin
A hostname verification bypass in GnuTLS v3.8.13 allows attackers to circumvent the Common Name fallback mechanism and eavesdrop on communic
KritikCVSS 9,1İstismar yokEPSS %08 Eki 2026
- CVE-2026-10793836İzleyin
Apache CXF: The Netty HTTP client transport does not perform TLS hostname verification.
KritikCVSS 9,1İstismar yokEPSS %0apache · cxf9 Eki 2026
- CVE-2026-3556335İzleyin
Apache Directory LDAP API: LDAP client implementation does not verify if the server certificate matches the intended LDAP hostname
YüksekCVSS 8,8İstismar yokEPSS %0apache · directory ldap api1 Haz 2026
- CVE-2026-6224334İzleyin
Netty 4.2.0 through 4.2.16 TLS Hostname Verification Bypass
YüksekCVSS 8,7İstismar yokEPSS %0netty · netty22 Ağu 2026
- CVE-2018-1093633İzleyin
A weakness was found in postgresql-jdbc before version 42.2.5.
YüksekCVSS 8,1Kavram kanıtıEPSS %2postgresql · postgresql jdbc driver30 Ağu 2018
- CVE-2022-3215332İzleyin
Splunk Enterprise lacked TLS host name validation
YüksekCVSS 8,1İstismar yokEPSS %0splunk · splunk15 Haz 2022
- CVE-2020-1105032İzleyin
Improper Validation of Certificate with Host Mismatch in Java-WebSocket
YüksekCVSS 8,1İstismar yokEPSS %0java-websocket project · java-websocket7 May 2020
- CVE-2025-350132İzleyin
Org.keycloak.protocol.services: keycloak hostname verification
YüksekCVSS 8,2İstismar yokEPSS %0red hat · red hat build of keycloak29 Nis 2025
- CVE-2024-3286832İzleyin
ZITADEL's Improper Lockout Mechanism Leads to MFA Bypass
YüksekCVSS 8,1İstismar yokEPSS %0zitadel · zitadel25 Nis 2024
- CVE-2026-4814532İzleyin
Apache Thrift: C++ TSSLSocket matchName() RFC 6125 Wildcard Bypass
YüksekCVSS 8,2İstismar yokEPSS %0apache · thrift27 Tem 2026
- CVE-2024-4978232İzleyin
IBM OpenPages improper certificate validation
YüksekCVSS 8,2İstismar yokEPSS %0ibm · openpages with watson20 Şub 2025
- CVE-2025-219032İzleyin
The mobile application (com.transsnet.store) has a man-in-the-middle attack vulnerability, which may lead to code injection risks.
YüksekCVSS 8,1İstismar yokEPSS %0tecno · com.transsnet.store11 Mar 2025
- CVE-2026-2274732İzleyin
Unauthorized User Impersonation when Using X.509 Client Certificates
YüksekCVSS 8,1Kavram kanıtıEPSS %0vmware · spring security22 Nis 2026
- CVE-2026-8439332İzleyin
A improper validation of certificate with host mismatch vulnerability in Fortinet FortiOS 7.6.1 through 7.6.6, FortiProxy 7.6.2 through 7.6.
YüksekCVSS 8,1İstismar yokEPSS %0fortinet · fortios8 Eyl 2026
- CVE-2023-3414332İzleyin
Improper Validation of Certificate Vulnerability in Hitachi Device Manager
YüksekCVSS 8,1İstismar yokEPSS %0hitachi · device manager17 Tem 2023