Vulnerabilities > Weak Password Requirements

DATE CVE VULNERABILITY TITLE RISK
2017-08-05 CVE-2017-9853 Weak Password Requirements vulnerability in SMA products
An issue was discovered in SMA Solar Technology products.
network
low complexity
sma CWE-521
critical
9.8
2017-07-31 CVE-2017-1386 Weak Password Requirements vulnerability in IBM API Connect and API Management
IBM API Connect 5.0.0.0 could allow a user to bypass policy restrictions and create non-compliant passwords which could be intercepted and decrypted using man in the middle techniques.
network
high complexity
ibm CWE-521
5.9
2017-06-07 CVE-2017-1196 Weak Password Requirements vulnerability in IBM Bigfix Security Compliance Analytics 1.9.70
IBM BigFix Compliance (TEMA SUAv1 SCA SCM) 1.9.70 does not require that users should have strong passwords by default, which makes it easier for attackers to compromise user accounts.
network
low complexity
ibm CWE-521
critical
9.8
2017-04-05 CVE-2017-6339 Weak Password Requirements vulnerability in Trendmicro Interscan web Security Virtual Appliance
Trend Micro InterScan Web Security Virtual Appliance (IWSVA) 6.5 before CP 1746 mismanages certain key and certificate data.
network
low complexity
trendmicro CWE-521
6.5
2017-04-04 CVE-2017-7306 Weak Password Requirements vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 has a weak default password for the secure vault, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism by leveraging knowledge of the password algorithm and the appliance serial number.
high complexity
riverbed CWE-521
6.4
2017-04-04 CVE-2017-7305 Weak Password Requirements vulnerability in Riverbed Rios
Riverbed RiOS through 9.6.0 does not require a bootloader password, which makes it easier for physically proximate attackers to defeat the secure-vault protection mechanism via a crafted boot.
low complexity
riverbed CWE-521
4.6