Vulnerabilities > Missing Authorization

DATE CVE VULNERABILITY TITLE RISK
2020-05-14 CVE-2020-10620 Missing Authorization vulnerability in Opto22 Softpac Project 9.6
Opto 22 SoftPAC Project Version 9.6 and prior.
network
low complexity
opto22 CWE-862
7.5
2020-05-14 CVE-2020-10612 Missing Authorization vulnerability in Opto22 Softpac Project 9.6
Opto 22 SoftPAC Project Version 9.6 and prior.
network
low complexity
opto22 CWE-862
6.4
2020-05-13 CVE-2020-1996 Missing Authorization vulnerability in Paloaltonetworks Pan-Os
A missing authorization vulnerability in the management server component of PAN-OS Panorama allows a remote unauthenticated user to inject messages into the management server ms.log file.
network
low complexity
paloaltonetworks CWE-862
5.0
2020-05-12 CVE-2020-6259 Missing Authorization vulnerability in SAP Adaptive Server Enterprise 15.7/16.0
Under certain conditions SAP Adaptive Server Enterprise, versions 15.7, 16.0, allows an attacker to access information which would otherwise be restricted leading to Missing Authorization Check.
network
low complexity
sap CWE-862
4.0
2020-05-12 CVE-2020-6258 Missing Authorization vulnerability in SAP Identity Management 8.0
SAP Identity Management, version 8.0, does not perform necessary authorization checks for an authenticated user, allowing the attacker to view certain sensitive information of the victim, leading to Missing Authorization Check.
network
low complexity
sap CWE-862
4.0
2020-05-12 CVE-2020-6256 Missing Authorization vulnerability in SAP Master Data Governance
SAP Master Data Governance, versions - 748, 749, 750, 751, 752, 800, 801, 802, 803, 804, allows users to display change request details without having required authorizations, due to Missing Authorization Check.
network
low complexity
sap CWE-862
4.0
2020-05-11 CVE-2020-12785 Missing Authorization vulnerability in Cpanel
cPanel before 86.0.14 allows attackers to obtain access to the current working directory via the account backup feature (SEC-540).
network
low complexity
cpanel CWE-862
5.5
2020-04-28 CVE-2020-5566 Missing Authorization vulnerability in Cybozu Garoon
Improper authorization vulnerability in Cybozu Garoon 4.0.0 to 4.10.3 allows remote authenticated attackers to alter the application's data via the applications 'E-mail' and 'Messages'.
network
low complexity
cybozu CWE-862
4.0
2020-04-24 CVE-2020-6212 Missing Authorization vulnerability in SAP ERP and S/4Hana
Egypt localized withholding tax reports Clearing of Liabilities and Remittance Statement and Summary in SAP ERP (versions 618, 730, EAPPLGLO 607) and S/4 HANA (versions 100, 101, 102, 103, 104) do not perform necessary authorization checks for an authenticated user, allowing reading or modification of some tax reports, due to Missing Authorization Check.
network
low complexity
sap CWE-862
5.5
2020-04-24 CVE-2020-7133 Missing Authorization vulnerability in HP HPE IOT + GCP
A unauthorized remote access vulnerability was discovered in HPE IOT + GCP version(s): 1.4.0, 1.4.1, 1.4.2, 1.2.4.2.
network
low complexity
hp CWE-862
7.5