# CWE-1287.

Every Advisory and CVE whose sources give the weakness CWE-1287, newest first.

## Records, newest first (an older page)

- [Cisco TelePresence Collaboration Endpoint Software and RoomOS Software Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2026-20119.md)
  `CVE-2026-20119` · CVE record: Cisco Cisco RoomOS Software and 1 more · CVSS 7.5 High · Not analysed yet · Published 4 Feb 2026 · Tags: CWE-1287
- [M365 Copilot Information Disclosure Vulnerability](https://agentprime.io/advisories/CVE-2026-24307.md)
  `CVE-2026-24307` · CVE record: Microsoft Microsoft 365 Copilot · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 22 Jan 2026 · Tags: CWE-1287
- [Oracle Corporation Oracle Java SE: Vulnerability in the Oracle Java SE, Oracle GraalVM for JDK…](https://agentprime.io/advisories/CVE-2026-21932.md)
  `CVE-2026-21932` · CVE record: Oracle Corporation Oracle Java SE and 2 more · CVSS 7.4 High · Not analysed yet · Published 20 Jan 2026 · Tags: CWE-1287
- [Mattermost fails to check Websocket request for proper UTF-8 format potentially crashing Calls plug-in in github.com/mattermost/mattermost-plugin-calls](https://agentprime.io/advisories/GHSA-j5vq-62gr-8v3r.md)
  `GHSA-j5vq-62gr-8v3r`, `CVE-2025-12689`, `GO-2025-4255` · Go `github.com/mattermost/mattermost-plugin-calls`: affected `<1.11.0`, fixed in `1.11.0` · CVSS 6.5 Medium · Not analysed yet · Published 30 Dec 2025 · Tags: CWE-1287
- [Meshtastic firmware allows forged DMs with no PKC to show up as encrypted](https://agentprime.io/advisories/CVE-2025-53627.md)
  `CVE-2025-53627` · CVE record: meshtastic firmware · CVSS 5.3 Medium · Not analysed yet · Published 29 Dec 2025 · Tags: CWE-1287
- [Mattermost GitHub Plugin Bot Identity Validation Bypass Allows Arbitrary GitHub Reaction Injection in github.com/mattermost/mattermost](https://agentprime.io/advisories/GHSA-jf5h-xfw4-p8gp.md)
  `GHSA-jf5h-xfw4-p8gp`, `CVE-2025-13352`, `GO-2025-4247` · Go `github.com/mattermost/mattermost` and 5 more: affected `>=11.0.0-alpha.1+incompatible, <11.1.0+incompatible`, fixed in `11.1.0+incompatible` · CVSS 3.0 Low · Not analysed yet · Published 22 Dec 2025 · Tags: CWE-1287
- [Free5GC is vulnerable to DoS via the Nudm_SubscriberDataManagement API in github.com/free5gc/openapi](https://agentprime.io/advisories/GHSA-3j9f-7w24-pcqg.md)
  `GHSA-3j9f-7w24-pcqg`, `CVE-2025-60633`, `GO-2025-4162` · Go `github.com/free5gc/openapi` and 1 more: affected `<1.2.2`, fixed in `1.2.2` · CVSS 6.5 Medium · Not analysed yet · Published 15 Dec 2025 · Tags: CWE-1287
- [JBL: Improper validation of ICM field in connection requests](https://agentprime.io/advisories/CVE-2024-2105.md)
  `CVE-2024-2105` · CVE record: JBL Flip 5 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Dec 2025 · Tags: CWE-1287
- [In KDE Connect before 1.33.0 on Android, malicious device IDs (sent via broadcast UDP) could cause an application crash.](https://agentprime.io/advisories/CVE-2025-32901.md)
  `CVE-2025-32901` · CVE record: KDE KDEConnect · CVSS 4.3 Medium · Not analysed yet · Published 5 Dec 2025 · Tags: CWE-1287
- [In Modem, there is a possible system crash due to a logic error.](https://agentprime.io/advisories/CVE-2025-20756.md)
  `CVE-2025-20756` · CVE record: MediaTek, Inc. MT2735, MT6833, MT6833P, MT6853, MT6853T, MT6855, MT6855T, MT6873, MT6875, MT6875T, MT6877, MT6877T, MT6877TT, MT6880, MT6883, MT6885, MT6889, MT6890, MT6891, MT6893, MT8673, MT8675, MT8676, MT8678, MT8755, MT8771, MT8791, MT8791T, MT8792, MT8793, MT8795T, MT8797, MT8798, MT8863, MT8873, MT8883, MT8893 · CVSS 6.5 Medium · Not analysed yet · Published 2 Dec 2025 · Tags: CWE-1287
- [CVE-2025-12977](https://agentprime.io/advisories/CVE-2025-12977.md)
  `CVE-2025-12977` · CVE record: FluentBit Fluent Bit · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 24 Nov 2025 · Tags: CWE-1287
- [DoS via Modbus Read Command](https://agentprime.io/advisories/CVE-2025-41729.md)
  `CVE-2025-41729` · CVE record: Janitza UMG 96-PA and 1 more · CVSS 7.5 High · Not analysed yet · Published 24 Nov 2025 · Tags: CWE-1287
- [The VAPIX API port.cgi did not have sufficient input validation, which may result in process crashes and impact usability.](https://agentprime.io/advisories/CVE-2025-9524.md)
  `CVE-2025-9524` · CVE record: Axis Communications AB AXIS OS · CVSS 4.3 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-1287
- [Incorrect permission assignment in Axis Communications AB AXIS OS](https://agentprime.io/advisories/CVE-2025-8108.md)
  `CVE-2025-8108` · CVE record: Axis Communications AB AXIS OS · CVSS 6.7 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: Broken access control, CWE-1287
- [ACAP applications can gain elevated privileges due to improper input validation, potentially leading to privilege escalation.](https://agentprime.io/advisories/CVE-2025-6298.md)
  `CVE-2025-6298` · CVE record: Axis Communications AB AXIS OS · CVSS 6.7 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-1287
- [An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution.](https://agentprime.io/advisories/CVE-2025-4645.md)
  `CVE-2025-4645` · CVE record: Axis Communications AB AXIS OS · CVSS 6.7 Medium · Not analysed yet · Published 11 Nov 2025 · Tags: CWE-1287
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59278.md)
  `CVE-2025-59278` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59275.md)
  `CVE-2025-59275` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: Memory corruption, CWE-1287
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-58729.md)
  `CVE-2025-58729` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-59277.md)
  `CVE-2025-59277` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59259.md)
  `CVE-2025-59259` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Local Session Manager (LSM) Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-59257.md)
  `CVE-2025-59257` · CVE record: Microsoft Windows 11 Version 24H2 and 4 more · CVSS 6.5 Medium · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Windows Authentication Elevation of Privilege Vulnerability](https://agentprime.io/advisories/CVE-2025-55701.md)
  `CVE-2025-55701` · CVE record: Microsoft Windows 10 Version 1507 and 4 more · CVSS 7.8 High · Not analysed yet · Published 14 Oct 2025 · Tags: CWE-1287
- [Mattermost Desktop App crashes when clicking on malformed external URL](https://agentprime.io/advisories/CVE-2025-58084.md)
  `CVE-2025-58084` · CVE record: Mattermost Mattermost · CVSS 3.5 Low · Not analysed yet · Published 13 Oct 2025 · Tags: CWE-1287
- [Synapse's invalid device keys degrade federation functionality](https://agentprime.io/advisories/GHSA-fh66-fcv5-jjfr.md)
  `GHSA-fh66-fcv5-jjfr`, `CVE-2025-61672`, `PYSEC-2026-1612` · PyPI `matrix-synapse`: affected `<1.138.3 || >=1.139.0rc2, <1.139.1`, fixed in `1.138.3`, `1.139.1` · CVSS 5.3 Medium · Not analysed yet · Published 8 Oct 2025 · Tags: CWE-1287
- [Cisco IOS: A vulnerability in the web UI of Cisco IOS Software could allow an authenticated…](https://agentprime.io/advisories/CVE-2025-20327.md)
  `CVE-2025-20327` · CVE record: Cisco IOS · CVSS 7.7 High · Not analysed yet · Published 24 Sept 2025 · Tags: CWE-1287
- [Authenticated File Disclosure/Delete](https://agentprime.io/advisories/CVE-2025-10207.md)
  `CVE-2025-10207` · CVE record: ABB FLXEON · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2025 · Tags: CWE-1287
- [Remote Code Execution](https://agentprime.io/advisories/CVE-2024-48851.md)
  `CVE-2024-48851` · CVE record: ABB FLXEON · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2025 · Tags: CWE-1287
- [Missing input validation vulnerability in SAP Landscape Transformation Replication Server](https://agentprime.io/advisories/CVE-2025-42929.md)
  `CVE-2025-42929` · CVE record: SAP_SE SAP Landscape Transformation Replication Server · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-1287
- [Missing input validation vulnerability in SAP S/4HANA (Private Cloud or On-Premise)](https://agentprime.io/advisories/CVE-2025-42916.md)
  `CVE-2025-42916` · CVE record: SAP_SE SAP S/4HANA (Private Cloud or On-Premise) · CVSS 8.1 High · Not analysed yet · Published 9 Sept 2025 · Tags: CWE-1287
- [Mattermost has Potential Server Crash due to Unvalidated Import Data in github.com/mattermost/mattermost-server](https://agentprime.io/advisories/GHSA-h469-4fcf-p23h.md)
  `GHSA-h469-4fcf-p23h`, `CVE-2025-8402`, `GO-2025-3911` · Go `github.com/mattermost/mattermost-server` and 3 more: affected `>=9.11.0+incompatible, <9.11.18+incompatible || >=10.5.0+incompatible, <10.5.9+incompatible || >=10.8.0+incompatible, <10.8.4+incompatible || >=10.9.0+incompatible, <10.9.4+incompatible || >=10.10.0+incompatible, <10.10.1+incompatible`, fixed in `9.11.18+incompatible`, `10.5.9+incompatible`, `10.8.4+incompatible`, `10.9.4+incompatible`, `10.10.1+incompatible` · CVSS 4.9 Medium · Not analysed yet · Published 29 Aug 2025 · Tags: Memory corruption, CWE-1287
- [Mattermost Confluence Plugin has Improper Validation of Specified Type of Input in github.com/mattermost/mattermost-plugin-confluence](https://agentprime.io/advisories/GHSA-3cg3-3mmr-w8hj.md)
  `GHSA-3cg3-3mmr-w8hj`, `CVE-2025-54525`, `GO-2025-3872` · Go `github.com/mattermost/mattermost-plugin-confluence`: affected `<1.5.0`, fixed in `1.5.0` · CVSS 7.5 High · Not analysed yet · Published 18 Aug 2025 · Tags: CWE-1287
- [Cisco Secure Firewall Adaptive Security Appliance and Cisco Secure Firewall Threat Defense Software Authenticated Arbitrary File Deletion](https://agentprime.io/advisories/CVE-2025-20251.md)
  `CVE-2025-20251` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 8.5 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1287
- [Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software Remote Access VPN Web Server Denial of Service Vulnerability](https://agentprime.io/advisories/CVE-2025-20244.md)
  `CVE-2025-20244` · CVE record: Cisco Cisco Adaptive Security Appliance (ASA) Software and 1 more · CVSS 7.7 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1287
- [Rockwell Automation FLEX 5000 I/O - Module Fault](https://agentprime.io/advisories/CVE-2025-9042.md)
  `CVE-2025-9042` · CVE record: Rockwell Automation FLEX 5000 I/O · CVSS 8.7 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1287
- [Rockwell Automation FLEX 5000 I/O - Module Fault](https://agentprime.io/advisories/CVE-2025-9041.md)
  `CVE-2025-9041` · CVE record: Rockwell Automation FLEX 5000 I/O · CVSS 8.7 High · Not analysed yet · Published 14 Aug 2025 · Tags: CWE-1287
- [An ACAP configuration file lacked sufficient input validation, which could allow for arbitrary code execution.](https://agentprime.io/advisories/CVE-2025-30027.md)
  `CVE-2025-30027` · CVE record: Axis Communications AB AXIS OS · CVSS 6.7 Medium · Not analysed yet · Published 12 Aug 2025 · Tags: CWE-1287
- [IBM SmartCloud Analytics - Log Analysis denial of service](https://agentprime.io/advisories/CVE-2024-40682.md)
  `CVE-2024-40682` · CVE record: IBM SmartCloud Analytics Log Analysis · CVSS 6.2 Medium · Not analysed yet · Published 23 Jul 2025 · Tags: CWE-1287
- [Jenkins Git Parameter Plugin vulnerable to code injection due to inexhaustive parameter check](https://agentprime.io/advisories/GHSA-qcj2-99cg-mppf.md)
  `GHSA-qcj2-99cg-mppf`, `CVE-2025-53652` · Maven `org.jenkins-ci.tools:git-parameter`: affected `<444.vca`, fixed in `444.vca` · CVSS 5.4 Medium · Not analysed yet · Published 9 Jul 2025 · Tags: CWE-20, CWE-1287
- [SOAP message input validation fault could in theory cause OAM service resource exhaustion](https://agentprime.io/advisories/CVE-2025-24335.md)
  `CVE-2025-24335` · CVE record: Nokia Nokia Single RAN · CVSS 2.0 Low · Not analysed yet · Published 2 Jul 2025 · Tags: CWE-1287
- [Net::IP::LPM version 1.10 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on IP addresses](https://agentprime.io/advisories/CVE-2025-40910.md)
  `CVE-2025-40910` · CVE record · CVSS 6.5 Medium · Not analysed yet · Published 27 Jun 2025 · Tags: CWE-1287
- [Meshtastic-Android vulnerable to forged DMs with no PKC showing up as encrypted](https://agentprime.io/advisories/CVE-2025-52883.md)
  `CVE-2025-52883` · CVE record: meshtastic Meshtastic-Android · CVSS 5.3 Medium · Not analysed yet · Published 24 Jun 2025 · Tags: CWE-1287
- [CIRCL-Fourq: Missing and wrong validation can lead to incorrect results](https://agentprime.io/advisories/GHSA-2x5j-vhc8-9cwm.md)
  `GHSA-2x5j-vhc8-9cwm`, `CVE-2025-8556`, `GO-2025-3754` · Go `github.com/cloudflare/circl`: affected `<1.6.1`, fixed in `1.6.1` · CVSS 3.7 Low · Not analysed yet · Published 10 Jun 2025 · Tags: Weak cryptography or TLS, CWE-20, CWE-1287
- [IBM QRadar Suite Software and IBM Cloud Pak for Security improper input validation](https://agentprime.io/advisories/CVE-2025-25020.md)
  `CVE-2025-25020` · CVE record: IBM QRadar Suite Software and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 3 Jun 2025 · Tags: CWE-1287
- [A Guard Tour VAPIX API parameter allowed the use of arbitrary values and can be incorrectly called, allowing an attacker to block access to the guard tour configuration page in the web interface of t…](https://agentprime.io/advisories/CVE-2025-0325.md)
  `CVE-2025-0325` · CVE record: Axis Communications AB AXIS OS · CVSS 4.3 Medium · Not analysed yet · Published 2 Jun 2025 · Tags: CWE-628, CWE-1287
- [Net::CIDR::Set versions 0.10 through 0.13 for Perl does not properly consider leading zero characters in IP CIDR address strings, which could allow attackers to bypass access control that is based on…](https://agentprime.io/advisories/CVE-2025-40911.md)
  `CVE-2025-40911` · CVE record: RRWO Net::CIDR::Set · CVSS 6.5 Medium · Not analysed yet · Published 27 May 2025 · Tags: CWE-1287
- [Weidmueller: Denial-of-Service Vulnerability in Industrial Ethernet Switches](https://agentprime.io/advisories/CVE-2025-41650.md)
  `CVE-2025-41650` · CVE record: Weidmueller IE-SW-VL05M-5TX and 4 more · CVSS 7.5 High · Not analysed yet · Published 27 May 2025 · Tags: CWE-1287
- [Cisco IOS XE Software: A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an…](https://agentprime.io/advisories/CVE-2025-20155.md)
  `CVE-2025-20155` · CVE record: Cisco Cisco IOS XE Software · CVSS 6.0 Medium · Not analysed yet · Published 7 May 2025 · Tags: CWE-1287
- [Kyverno vulnerable to bypass of policy rules that use namespace selectors in match statements](https://agentprime.io/advisories/GHSA-jrr2-x33p-6hvc.md)
  `GHSA-jrr2-x33p-6hvc`, `BIT-kyverno-2025-46342`, `CVE-2025-46342`, `GO-2025-3652` · Go `github.com/kyverno/kyverno`: affected `<1.13.5 || >=1.14.0-alpha.1, <1.14.0`, fixed in `1.13.5`, `1.14.0` · CVSS 8.6 High · Not analysed yet · Published 29 Apr 2025 · Tags: CWE-1287
- [Mattermost Playbooks fails to properly validate the props used by the RetrospectivePost custom post type](https://agentprime.io/advisories/GHSA-3g36-gf7c-75qw.md)
  `GHSA-3g36-gf7c-75qw`, `CVE-2025-41395`, `GO-2025-3642` · Go `github.com/mattermost/mattermost-plugin-playbooks` and 1 more: affected `<1.41.0 || >=2.0.0`, fixed in `1.41.0` · CVSS 6.5 Medium · Not analysed yet · Published 24 Apr 2025 · Tags: CWE-1287
- [HCL BigFix Web Reports might be subject to a Denial of Service (DoS) attack](https://agentprime.io/advisories/CVE-2024-42189.md)
  `CVE-2024-42189` · CVE record: HCL Software HCL BigFix Platform · CVSS 5.6 Medium · Not analysed yet · Published 15 Apr 2025 · Tags: CWE-1287
- [Axis Communications AB AXIS OS: 51l3nc3, a member of the AXIS OS Bug Bounty Program…](https://agentprime.io/advisories/CVE-2024-47261.md)
  `CVE-2024-47261` · CVE record: Axis Communications AB AXIS OS · CVSS 4.3 Medium · Not analysed yet · Published 8 Apr 2025 · Tags: CWE-1287
- [Improper input validation in Google Chrome](https://agentprime.io/advisories/CVE-2025-3070.md)
  `CVE-2025-3070` · CVE record: Google Chrome · CVSS 6.5 Medium · Not analysed yet · Published 2 Apr 2025 · Tags: CWE-20, CWE-1287
- [Denial of Service Via Malicious GIF](https://agentprime.io/advisories/CVE-2025-1558.md)
  `CVE-2025-1558` · CVE record: Mattermost Mattermost · CVSS 6.5 Medium · Not analysed yet · Published 24 Mar 2025 · Tags: CWE-1287
- [Axis Communications AB AXIS OS: Dzmitry Lukyanenka, member of the AXIS OS Bug Bounty Program…](https://agentprime.io/advisories/CVE-2024-47262.md)
  `CVE-2024-47262` · CVE record: Axis Communications AB AXIS OS · CVSS 5.3 Medium · Not analysed yet · Published 4 Mar 2025 · Tags: CWE-1287
- [Keylime registrar is vulnerable to Denial-of-Service attack when updated to version 7.12.0](https://agentprime.io/advisories/GHSA-9jxq-5x44-gx23.md)
  `GHSA-9jxq-5x44-gx23`, `CVE-2025-1057`, `PYSEC-2026-1488` · PyPI `keylime`: affected `>=7.12.0, <7.12.1`, fixed in `7.12.1` · CVSS 4.3 Medium · Not analysed yet · Published 14 Feb 2025 · Tags: CWE-704, CWE-1287
- [In Perfex Crm < 3.2.1, an authenticated attacker can send a crafted HTTP POST request to the affected upload_sales_file endpoint.](https://agentprime.io/advisories/CVE-2024-56908.md)
  `CVE-2024-56908` · CVE record · CVSS 6.8 Medium · Not analysed yet · Published 13 Feb 2025 · Tags: HTTP request smuggling, CWE-1287
- [Avaya Spaces HTML injection (HTMLi) Vulnerability](https://agentprime.io/advisories/CVE-2024-12756.md)
  `CVE-2024-12756` · CVE record: Avaya Avaya Spaces · CVSS 7.3 High · Not analysed yet · Published 11 Feb 2025 · Tags: CWE-1287
- [Authentication bypass in @sap/approuter](https://agentprime.io/advisories/GHSA-cpfx-964w-4jvp.md)
  `GHSA-cpfx-964w-4jvp`, `CVE-2025-24876` · npm `@sap/approuter`: affected `>=2.6.1, <16.7.2`, fixed in `16.7.2` · CVSS 8.1 High · Not analysed yet · Published 11 Feb 2025 · Tags: Open redirect, CWE-302, CWE-1287
- [Possible DoS by memory exhaustion in net-imap](https://agentprime.io/advisories/GHSA-7fc5-f82f-cx69.md)
  `GHSA-7fc5-f82f-cx69`, `CVE-2025-25186` · RubyGems `net-imap`: affected `>=0.3.2, <0.3.8 || >=0.4.0, <0.4.19 || >=0.5.0, <0.5.6`, fixed in `0.3.8`, `0.4.19`, `0.5.6` · CVSS 6.5 Medium · Not analysed yet · Published 10 Feb 2025 · Tags: Denial of service, CWE-405, CWE-409, CWE-1287

Newest: <https://agentprime.io/advisories/tag/cwe-1287.md>
Older: <https://agentprime.io/advisories/tag/cwe-1287.md?cursor=WyIyMDI1LTAyLTEwVDE3OjQyOjQzLjAwMDAwMFoiLCJHSFNBLTdmYzUtZjgyZi1jeDY5Il0>

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?tag=cwe-1287&cursor=WyIyMDI2LTAyLTA5VDE3OjQ2OjE0LjAwMDAwMFoiLCJHSFNBLTQzZmMtamY4Ni1qNDMzIl0>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/tag/cwe-1287/?cursor=WyIyMDI2LTAyLTA5VDE3OjQ2OjE0LjAwMDAwMFoiLCJHSFNBLTQzZmMtamY4Ni1qNDMzIl0>. Everything for agents: <https://agentprime.io/llms.txt>.