CWE-602 · 161 kayıt

Client-Side Enforcement of Server-Side Security

Bu sınıftaki CVE’ler

161 kayıt

CVE kayıtları
Aksiyon	CVE	Zafiyet	Ciddiyet	KEV	EPSS	Yayın
40Planlayın	CVE-2026-64813İstismar yok	In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development sessionjetbrains · intellij idea · CWE-602 Kimlik doğrulamasız	Kritik10,0	—	%0,5	23 Tem 2026
40Planlayın	CVE-2026-23478İstismar yok	Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callbackcal · cal.com · CWE-602 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik10,0	—	%0,5	13 Oca 2026
40Planlayın	CVE-2026-42160İstismar yok	Data Space Portal: Incorrect Authorization and Client-Side Enforcement of Server-Side Security in ghcr.io/sovity/ds-portal-ce-backendsovity · dataspace-portal · CWE-602 Kimlik doğrulamasız	Kritik10,0	—	%0,4	8 May 2026
39İzleyin	CVE-2025-51682İstismar yok	mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to adminismjobtime · mjobtime · CWE-602 Kimlik doğrulamasız	Kritik9,8	—	%1,6	1 Ara 2025
39İzleyin	CVE-2025-10640İstismar yok	Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professionalefficientlab · workexaminer professional · CWE-602 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,9	21 Eki 2025
39İzleyin	CVE-2025-27681İstismar yok	Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-printerlogic · vasion print · CWE-602 Kimlik doğrulamasız	Kritik9,8	—	%0,8	5 Mar 2025
39İzleyin	CVE-2024-12603İstismar yok	A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.tecno · com.transsion.applock · CWE-602 Kimlik doğrulamasız	Kritik9,8	—	%0,6	12 Ara 2024
39İzleyin	CVE-2023-0750İstismar yok	Yellowbrik PEC-1864 authentication bypasslynx-technik · yellobrik pec 1864 firmware · CWE-602 Kimlik doğrulamasız Kimlik doğrulama atlatma	Kritik9,8	—	%0,5	6 Nis 2023
39İzleyin	CVE-2025-28168İstismar yok	The Multiple File Upload add-on component 3.1.0 for OutSystems is vulnerable to Unrestricted File Upload.multiple file upload project · multiple file upload · CWE-602 Kimlik doğrulamasız Dosya yükleme	Kritik9,8	—	%0,3	5 May 2025
38İzleyin	CVE-2022-20658İstismar yok	Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerabilitycisco · unified contact center express · CWE-602	Kritik9,6	—	%1,4	14 Oca 2022
37İzleyin	CVE-2025-32469İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEsiemens · ruggedcom rox mx5000 · CWE-602 RCE Komut enjeksiyonu	Kritik9,4	—	%1,2	13 May 2025
37İzleyin	CVE-2025-33024İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEsiemens · ruggedcom rox mx5000 · CWE-602 RCE Komut enjeksiyonu	Kritik9,4	—	%1,2	13 May 2025
37İzleyin	CVE-2025-33025İstismar yok	A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGEsiemens · ruggedcom rox mx5000 · CWE-602 RCE Komut enjeksiyonu	Kritik9,4	—	%1,2	13 May 2025
36İzleyin	CVE-2024-23666Kavram kanıtı	A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0fortinet · fortianalyzer · CWE-602	Yüksek8,8	—	%2,7	12 Kas 2024
36İzleyin	CVE-2022-1525İstismar yok	Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Securitycognex · 3d-a1000 dimensioning system firmware · CWE-602 Kimlik doğrulamasız	Kritik9,1	—	%0,8	6 Eyl 2022
36İzleyin	CVE-2026-59504İstismar yok	Priority – CWE-602: Client-Side Enforcement of Server-Side Securitypriority · portal generator addon to priority erp (developed by soft solutions) · CWE-602 Kimlik doğrulamasız	Kritik9,1	—	%0,4	13 Ağu 2026
36İzleyin	CVE-2026-25737İstismar yok	Budibase Arbitrary File Upload Leading to Multiple Critical Vulnerabilities (SSRF, Stored XSS)budibase · budibase · CWE-602 SSRF Dosya yükleme XSS	Kritik9,0	—	%0,4	9 Mar 2026
35İzleyin	CVE-2017-12161İstismar yok	It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset requekeycloak · keycloak · CWE-602 Kimlik doğrulamasız	Yüksek8,8	—	%1,3	21 Şub 2018
35İzleyin	CVE-2024-9844İstismar yok	Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticativanti · connect secure · CWE-602	Yüksek8,8	—	%1,0	10 Ara 2024
35İzleyin	CVE-2024-31491İstismar yok	A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2fortinet · fortisandbox · CWE-602	Yüksek8,8	—	%0,8	14 May 2024
35İzleyin	CVE-2024-28029İstismar yok	Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergiedeltaww · diaenergie · CWE-602	Yüksek8,8	—	%0,7	21 Mar 2024
35İzleyin	CVE-2026-14086İstismar yok	Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a cragoogle · chrome · CWE-602 pre-auth RCE	Yüksek8,8	—	%0,4	30 Haz 2026
35İzleyin	CVE-2025-61197İstismar yok	An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26 CWE-602	Yüksek8,9	—	%0,3	6 Eki 2025
35İzleyin	CVE-2025-33137İstismar yok	IBM Aspera Faspex data modificationibm · aspera faspex · CWE-602	Yüksek8,8	—	%0,3	22 May 2025
35İzleyin	CVE-2026-13903İstismar yok	Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalatigoogle · chrome · CWE-602 Kimlik doğrulamasız	Yüksek8,8	—	%0,3	30 Haz 2026

CVE-2026-64813
40Planlayın
In JetBrains IntelliJ IDEA before 2026.2 unauthorized settings modification was possible in a Remote Development session
KritikCVSS 10,0İstismar yokEPSS %1
- Kimlik doğrulamasız
jetbrains · intellij idea23 Tem 2026
CVE-2026-23478
40Planlayın
Cal.com has an Authentication Bypass via Unvalidated Email in Custom JWT Callback
KritikCVSS 10,0İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
cal · cal.com13 Oca 2026
CVE-2026-42160
40Planlayın
Data Space Portal: Incorrect Authorization and Client-Side Enforcement of Server-Side Security in ghcr.io/sovity/ds-portal-ce-backend
KritikCVSS 10,0İstismar yokEPSS %0
- Kimlik doğrulamasız
sovity · dataspace-portal8 May 2026
CVE-2025-51682
39İzleyin
mJobtime 15.7.2 handles authorization on the client side, which allows an attacker to modify the client-side code and gain access to adminis
KritikCVSS 9,8İstismar yokEPSS %2
- Kimlik doğrulamasız
mjobtime · mjobtime1 Ara 2025
CVE-2025-10640
39İzleyin
Missing Server-Side Authentication Checks in EfficientLab WorkExaminer Professional
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
efficientlab · workexaminer professional21 Eki 2025
CVE-2025-27681
39İzleyin
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
printerlogic · vasion print5 Mar 2025
CVE-2024-12603
39İzleyin
A logic vulnerability in the the mobile application (com.transsion.applock) can lead to bypassing the application password.
KritikCVSS 9,8İstismar yokEPSS %1
- Kimlik doğrulamasız
tecno · com.transsion.applock12 Ara 2024
CVE-2023-0750
39İzleyin
Yellowbrik PEC-1864 authentication bypass
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Kimlik doğrulama atlatma
lynx-technik · yellobrik pec 1864 firmware6 Nis 2023
CVE-2025-28168
39İzleyin
The Multiple File Upload add-on component 3.1.0 for OutSystems is vulnerable to Unrestricted File Upload.
KritikCVSS 9,8İstismar yokEPSS %0
- Kimlik doğrulamasız
- Dosya yükleme
multiple file upload project · multiple file upload5 May 2025
CVE-2022-20658
38İzleyin
Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability
KritikCVSS 9,6İstismar yokEPSS %1
cisco · unified contact center express14 Oca 2022
CVE-2025-32469
37İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGE
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
siemens · ruggedcom rox mx500013 May 2025
CVE-2025-33024
37İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGE
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
siemens · ruggedcom rox mx500013 May 2025
CVE-2025-33025
37İzleyin
A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5), RUGGEDCOM ROX MX5000RE (All versions < V2.16.5), RUGGE
KritikCVSS 9,4İstismar yokEPSS %1
- RCE
- Komut enjeksiyonu
siemens · ruggedcom rox mx500013 May 2025
CVE-2024-23666
36İzleyin
A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at least version 7.4.0 and 7.2.0 through 7.2.6 and 7.0
YüksekCVSS 8,8Kavram kanıtıEPSS %3
fortinet · fortianalyzer12 Kas 2024
CVE-2022-1525
36İzleyin
Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security
KritikCVSS 9,1İstismar yokEPSS %1
- Kimlik doğrulamasız
cognex · 3d-a1000 dimensioning system firmware6 Eyl 2022
CVE-2026-59504
36İzleyin
Priority – CWE-602: Client-Side Enforcement of Server-Side Security
KritikCVSS 9,1İstismar yokEPSS %0
- Kimlik doğrulamasız
priority · portal generator addon to priority erp (developed by soft solutions)13 Ağu 2026
CVE-2026-25737
36İzleyin
Budibase Arbitrary File Upload Leading to Multiple Critical Vulnerabilities (SSRF, Stored XSS)
KritikCVSS 9,0İstismar yokEPSS %0
- SSRF
- Dosya yükleme
- XSS
budibase · budibase9 Mar 2026
CVE-2017-12161
35İzleyin
It was found that keycloak before 3.4.2 final would permit misuse of a client-side /etc/hosts entry to spoof a URL in a password reset reque
YüksekCVSS 8,8İstismar yokEPSS %1
- Kimlik doğrulamasız
keycloak · keycloak21 Şub 2018
CVE-2024-9844
35İzleyin
Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure before version 22.7R2.4 allows a remote authenticat
YüksekCVSS 8,8İstismar yokEPSS %1
ivanti · connect secure10 Ara 2024
CVE-2024-31491
35İzleyin
A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox 4.4.0 through 4.4.4, FortiSandbox 4.2.1 through 4.2
YüksekCVSS 8,8İstismar yokEPSS %1
fortinet · fortisandbox14 May 2024
CVE-2024-28029
35İzleyin
Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie
YüksekCVSS 8,8İstismar yokEPSS %1
deltaww · diaenergie21 Mar 2024
CVE-2026-14086
35İzleyin
Insufficient policy enforcement in HID in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to execute arbitrary code via a cra
YüksekCVSS 8,8İstismar yokEPSS %0
- pre-auth RCE
google · chrome30 Haz 2026
CVE-2025-61197
35İzleyin
An issue in Orban Optimod 5950, Optimod 5950HD, Optimod 5750, Optimod 5750HD, Optimod Trio Optimod version 1.0.0.33 - System version 2.5.26
YüksekCVSS 8,9İstismar yokEPSS %0
6 Eki 2025
CVE-2025-33137
35İzleyin
IBM Aspera Faspex data modification
YüksekCVSS 8,8İstismar yokEPSS %0
ibm · aspera faspex22 May 2025
CVE-2026-13903
35İzleyin
Insufficient policy enforcement in Bluetooth in Google Chrome prior to 150.0.7871.47 allowed a remote attacker to perform privilege escalati
YüksekCVSS 8,8İstismar yokEPSS %0
- Kimlik doğrulamasız
google · chrome30 Haz 2026

Tüm zafiyet sınıfları