CWE-425
2 CVEs of this weakness class.
Show as table
| Year published | CVEs | In CISA KEV |
|---|---|---|
| 2021 | 1 | 1 |
| 2022 | 0 | 0 |
| 2023 | 0 | 0 |
| 2024 | 1 | 1 |
Exploitation first, with newly exploited CVEs rising above old ones
- CVE-2024-45195HIGH 7.5KEVEPSS 100%
Direct Request ('Forced Browsing') vulnerability in Apache OFBiz. This issue affects Apache OFBiz: before 18.12.16. Users are recommended to upgrade to version 18.12.16, which fixes the issue.
- CVE-2021-26085MED 5.3KEVEPSS 100%
Affected versions of Atlassian Confluence Server allow remote attackers to view restricted resources via a Pre-Authorization Arbitrary File Read vulnerability in the /s/ endpoint. The affected versions are before version 7.4.10, and from version 7.5.0 before 7.12.3.