# CWE-1220. Every Advisory and CVE whose sources give the weakness CWE-1220, newest first. ## Records, newest first (an older page) - [Potential Insufficient Access Control vulnerability has been identified in OpenText™ SMAX/AMX products.](https://agentprime.io/advisories/CVE-2023-32259.md) `CVE-2023-32259` · CVE record: OpenText™ Service Management Automation X (SMAX) and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Mar 2024 · Tags: CWE-1220 - [Tripleo-ansible: bind keys are world readable](https://agentprime.io/advisories/CVE-2023-6725.md) `CVE-2023-6725` · CVE record: Red Hat Red Hat OpenStack Platform 17.1 for RHEL 8 and 4 more · CVSS 5.5 Medium · Not analysed yet · Published 15 Mar 2024 · Tags: CWE-1220 - [Microsoft Edge (Chromium-based) Security Feature Bypass Vulnerability](https://agentprime.io/advisories/CVE-2024-26246.md) `CVE-2024-26246` · CVE record: Microsoft Microsoft Edge for Android · CVSS 3.9 Low · Not analysed yet · Published 14 Mar 2024 · Tags: CWE-1220 - [Heimavista Rpage and Epage - Broken Access Control](https://agentprime.io/advisories/CVE-2024-2412.md) `CVE-2024-2412` · CVE record: Heimavista Rpage and 1 more · CVSS 5.3 Medium · Not analysed yet · Published 13 Mar 2024 · Tags: CWE-1220 - [Speckle Server API Token Privilege Escalation](https://agentprime.io/advisories/CVE-2023-50713.md) `CVE-2023-50713` · CVE record: specklesystems speckle-server · CVSS 6.5 Medium · Not analysed yet · Published 14 Dec 2023 · Tags: CWE-1220 - [Dell PowerProtect DD: Dell PowerProtect DD, versions prior to 7.13.0.10, LTS 7.7.5.25, LTS 7.10.1.15…](https://agentprime.io/advisories/CVE-2023-44285.md) `CVE-2023-44285` · CVE record: Dell PowerProtect DD · CVSS 7.8 High · Not analysed yet · Published 14 Dec 2023 · Tags: CWE-1220 - [Openshift-logging: lokistack authorisation is cached too broadly](https://agentprime.io/advisories/CVE-2023-4456.md) `CVE-2023-4456` · CVE record: Red Hat RHOL-5.5-RHEL-8 and 2 more · CVSS 5.7 Medium · Not analysed yet · Published 21 Aug 2023 · Tags: CWE-1220 - [Postgresql: merge fails to enforce update or select row security policies](https://agentprime.io/advisories/CVE-2023-39418.md) `CVE-2023-39418` · CVE record: Red Hat Red Hat Enterprise Linux 8 and 4 more · CVSS 3.1 Low · Not analysed yet · Published 11 Aug 2023 · Tags: CWE-1220 - [Microsoft Security Advisory CVE-2023-33127: .NET Remote Code Execution Vulnerability](https://agentprime.io/advisories/GHSA-485r-rp8v-998v.md) `GHSA-485r-rp8v-998v`, `BIT-dotnet-2023-33127`, `BIT-dotnet-sdk-2023-33127`, `CVE-2023-33127` · NuGet `Microsoft.WindowsDesktop.App.Runtime.win-arm64` and 2 more: affected `>=6.0.0, <6.0.20 || >=7.0.0, <7.0.9`, fixed in `6.0.20`, `7.0.9` · CVSS 8.1 High · Not analysed yet · Published 11 Jul 2023 · Tags: CWE-1220 - [Insufficient Granularity of Access Control in fossbilling/fossbilling](https://agentprime.io/advisories/CVE-2023-3227.md) `CVE-2023-3227` · CVE record: fossbilling fossbilling/fossbilling · CVSS 5.4 Medium · Not analysed yet · Published 14 Jun 2023 · Tags: CWE-1220 - [NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denia…](https://agentprime.io/advisories/CVE-2023-0205.md) `CVE-2023-0205` · CVE record: NVIDIA NVIDIA ConnectX Firmware · CVSS 5.0 Medium · Not analysed yet · Published 22 Apr 2023 · Tags: CWE-1220 - [NVIDIA ConnectX-5, ConnectX-6, and ConnectX6-DX contain a vulnerability in the NIC firmware, where an unprivileged user can exploit insufficient granularity of access control, which may lead to denia…](https://agentprime.io/advisories/CVE-2023-0203.md) `CVE-2023-0203` · CVE record: NVIDIA NVIDIA ConnectX Firmware · CVSS 5.0 Medium · Not analysed yet · Published 22 Apr 2023 · Tags: CWE-1220 - [Haas Controller version 100.20.000.1110 has insufficient granularity of access control when using the "Ethernet Q Commands" service.](https://agentprime.io/advisories/CVE-2022-2475.md) `CVE-2022-2475` · CVE record: Haas Haas CNC Controller · CVSS 9.8 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2022 · Tags: CWE-1220 - [Withdrawn Advisory: Insufficient Granularity of Access Control in JSDom](https://agentprime.io/advisories/GHSA-f4c9-cqv8-9v98.md) `GHSA-f4c9-cqv8-9v98`, `CVE-2021-20066` · npm `jsdom`: affected `<16.5.0`, fixed in `16.5.0` · CVSS 0.0 None · Withdrawn · Not analysed yet · Published 24 May 2022 · Tags: CWE-1220 - [Non Privilege User can Enable or Disable Registered in openemr/openemr](https://agentprime.io/advisories/CVE-2022-1461.md) `CVE-2022-1461` · CVE record: openemr openemr/openemr · CVSS 8.1 High · Not analysed yet · Published 25 Apr 2022 · Tags: CWE-1220 - [Accounting User Can Download Patient Reports in openemr in openemr/openemr](https://agentprime.io/advisories/CVE-2022-1177.md) `CVE-2022-1177` · CVE record: openemr openemr/openemr · CVSS 6.5 Medium · Not analysed yet · Published 30 Mar 2022 · Tags: CWE-1220 - [Junos OS: SRX Series: Under a specific device configuration an attacker can access the devices J-Web management services from any interface, regardless of security settings protecting the service](https://agentprime.io/advisories/CVE-2021-31384.md) `CVE-2021-31384` · CVE record: Juniper Networks Junos OS · CVSS 7.2 High · Not analysed yet · Published 19 Oct 2021 · Tags: Broken access control, CWE-551, CWE-939, CWE-1220 Newest: ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .