The Profile Builder WordPress plugin before 3.9.8 lacks authorisation and CSRF in its page creation function which allow
A missing permission check in Jenkins AWS CodeCommit Trigger Plugin 3.0.12 and earlier allows attackers with Overall/Rea
A missing permission check in Jenkins Frugal Testing Plugin 1.1 and earlier allows attackers with Overall/Read permissio
The Duplicate Post Page Menu & Custom Post Type plugin for WordPress is vulnerable to unauthorized page and post duplica
The WooCommerce CVR Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a mis
Mattermost fails to properly check the creator of an attached file when adding the file to a draft post, potentially exp
e-Gov Client Application (Windows version) versions prior to 2.1.1.0 and e-Gov Client Application (macOS version) versio
The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to
The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to
The WooCommerce EAN Payment Gateway plugin for WordPress is vulnerable to unauthorized modification of data due to a mis
The BEAR for WordPress is vulnerable to Missing Authorization in versions up to, and including, 1.1.3.3. This is due to
A missing permission check in Jenkins lambdatest-automation Plugin 1.20.9 and earlier allows attackers with Overall/Read
Rundeck is an open source automation service with a web console, command line tools and a WebAPI. In affected versions a
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in AWeber AWeber – Free Sign Up Form and Landing
The WP Customer Reviews plugin for WordPress is vulnerable to Sensitive Information Exposure in versions up to, and incl
The WP EXtra plugin for WordPress is vulnerable to unauthorized access to restricted functionality due to a missing capa
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Funnelforms Free plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability
The Limit Login Attempts Reloaded WordPress plugin before 2.25.26 is missing authorization on the `toggle_auto_update` A
The WordPress Backup & Migration WordPress plugin before 1.4.4 does not authorize some AJAX requests, allowing users wit
A missing permission check in Jenkins NeuVector Vulnerability Scanner Plugin 1.22 and earlier allows attackers with Over
Missing Authorization vulnerability in WPOmnia KB Support – WordPress Help Desk and Knowledge Base allows Accessing Func
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check
The System Dashboard plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check
A missing permission check in Jenkins Scriptler Plugin 342.v6a_89fd40f466 and earlier allows attackers with Overall/Read
Missing permission checks in Jenkins Nexus Platform Plugin 3.18.0-03 and earlier allow attackers with Overall/Read permi
Missing permission checks in Jenkins PaaSLane Estimate Plugin 1.0.4 and earlier allow attackers with Overall/Read permis
An issue has been discovered in GitLab affecting all versions starting from 9.3 before 16.4.4, all versions starting fro
Missing Authorization vulnerability in Clever plugins Delete Duplicate Posts allows Accessing Functionality Not Properly
Missing Authorization, Cross-Site Request Forgery (CSRF) vulnerability in Roland Barker, xnau webdesign Participants Dat
An issue was discovered in Peplink Balance Two before 8.4.0. A missing authorization check in the administration web ser
A vulnerability was found in Poly Trio 8500, Trio 8800 and Trio C60. It has been classified as problematic. This affects
When processing an email invite to a private channel on a team, Mattermost fails to validate the inviter's permission to
OX App Suite before backend 7.10.6-rev37 does not enforce 2FA for all endpoints, e.g., reading from a drive, reading con
Mattermost fails to verify if the requestor is a sysadmin or not, before allowing `install` requests to the Apps allowin
A missing permission check in Jenkins Fortify Plugin 22.1.38 and earlier allows attackers with Overall/Read permission t
Grafana is an open-source platform for monitoring and observability. The option to send a test alert is not available
HashiCorp Nomad and Nomad Enterprise 0.7.0 up to 1.5.6 and 1.4.10 ACL policies using a block without a label generates u
The Blog2Social plugin for WordPress is vulnerable to authorization bypass due to missing capability checks in versions
SAP NetWeaver Application Server for ABAP and ABAP Platform - versions 700, 701, 702, 731, 740, 750, 751, 752, does not
The Nested Pages plugin for WordPress is vulnerable to unauthorized loss of data due to a missing capability check on th
The ShipStation.com plugin 1.1 and earlier for CS-Cart allows remote attackers to insert arbitrary information into the
Frequently Asked Questions
What is CWE-862?
CWE-862 (Missing Authorization) is a weakness category in the Common Weakness Enumeration (CWE) system maintained by MITRE. It describes a class of software or hardware vulnerability that can lead to security issues.
How many CVEs are classified as CWE-862?
There are 10,347 CVE records associated with CWE-862 in our database. Of these, 472 are critical severity, 2109 are high severity, and 6422 are medium severity.
How can I protect against CWE-862 vulnerabilities?
Protection strategies depend on the specific weakness type. General measures include input validation, secure coding practices, regular security testing, and keeping software up to date. CyberStrike can help by automatically scanning your infrastructure for vulnerabilities related to CWE-862 using AI-powered security agents.
Detect CWE-862 Vulnerabilities
CyberStrike's AI agents automatically detect missing authorization vulnerabilities across your infrastructure.
Get Started