Vulnerabilities > Improper Certificate Validation

DATE CVE VULNERABILITY TITLE RISK
2022-06-01 CVE-2020-26184 Improper Certificate Validation vulnerability in multiple products
Dell BSAFE Micro Edition Suite, versions prior to 4.5.1, contain an Improper Certificate Validation vulnerability.
network
low complexity
dell oracle CWE-295
7.5
2022-05-26 CVE-2022-26766 Improper Certificate Validation vulnerability in Apple products
A certificate parsing issue was addressed with improved checks.
local
low complexity
apple CWE-295
5.5
2022-05-26 CVE-2022-29082 Improper Certificate Validation vulnerability in Dell EMC Networker
Dell EMC NetWorker versions 19.1.x, 19.1.0.x, 19.1.1.x, 19.2.x, 19.2.0.x, 19.2.1.x 19.3.x, 19.3.0.x, 19.4.x, 19.4.0.x, 19.5.x,19.5.0.x, 19.6 and 19.6.0.1 and 19.6.0.2 contain an Improper Validation of Certificate with Host Mismatch vulnerability in Rabbitmq port 5671 which could allow remote attackers to spoof certificates.
network
low complexity
dell CWE-295
4.6
2022-05-24 CVE-2022-22306 Improper Certificate Validation vulnerability in Fortinet Fortios
An improper certificate validation vulnerability [CWE-295] in FortiOS 6.0.0 through 6.0.14, 6.2.0 through 6.2.10, 6.4.0 through 6.4.8, 7.0.0 may allow a network adjacent and unauthenticated attacker to man-in-the-middle the communication between the FortiGate and some peers such as private SDNs and external cloud platforms.
high complexity
fortinet CWE-295
5.3
2022-05-21 CVE-2022-29222 Improper Certificate Validation vulnerability in Pion Dtls
Pion DTLS is a Go implementation of Datagram Transport Layer Security.
network
low complexity
pion CWE-295
7.5
2022-05-18 CVE-2022-22787 Improper Certificate Validation vulnerability in Zoom Meetings
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request.
network
high complexity
zoom CWE-295
7.5
2022-05-17 CVE-2021-29726 Improper Certificate Validation vulnerability in IBM products
IBM Sterling Secure Proxy 6.0.3 and IBM Secure External Authentication Server 6.0.3 does not properly ensure that a certificate is actually associated with the host due to improper validation of certificates.
network
low complexity
ibm CWE-295
5.3
2022-05-17 CVE-2013-10001 Improper Certificate Validation vulnerability in HTC Mail 5.2.2222282614.528614.528614/5.5.550363
A vulnerability was found in HTC One/Sense 4.x.
network
high complexity
htc CWE-295
5.9
2022-05-12 CVE-2021-27768 Improper Certificate Validation vulnerability in Hcltech Verse
Using the ability to perform a Man-in-the-Middle (MITM) attack, which indicates a lack of hostname verification, sensitive account information was able to be intercepted.
network
high complexity
hcltech CWE-295
5.9
2022-05-10 CVE-2022-26923 Improper Certificate Validation vulnerability in Microsoft products
Active Directory Domain Services Elevation of Privilege Vulnerability
network
low complexity
microsoft CWE-295
8.8