Advisories · Weakness
CWE-357.
Every Advisory and CVE whose sources give the weakness CWE-357, newest first.
- CVSS 4.7 Medium
JetBrains IntelliJ IDEA: In JetBrains IntelliJ IDEA before 2026.3 opening arbitrary URLs without confirmation was…
- JetBrains IntelliJ IDEA
- CWE-357
- CVSS 3.1 Low
JetBrains Toolbox App: In JetBrains Toolbox App before 3.9 insufficient warning in the login dialog allowed…
- JetBrains Toolbox App
- CWE-357
- CVSS 4.3 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-357
- CVSS 4.6 Medium
Siber Systems, Inc. Android App "RoboForm Password Manager": Android App "RoboForm Password Manager" provided by Siber Systems…
- Siber Systems, Inc. Android App "RoboForm Password Manager"
- CWE-357
- CVSS 7.1 High
Remote Desktop Spoofing Vulnerability
- Microsoft Windows 10 Version 1607
- Microsoft Windows 10 Version 1809
- CWE-357
- CVSS 4.7 Medium
Microsoft Edge (Chromium-based) for Android Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-357
- CVSS 8.1 High
Remote Desktop Spoofing Vulnerability
- Microsoft Windows 11 version 22H2
- Microsoft Windows 11 version 22H3
- CWE-357
- CVSS 8.6 High
XWiki does not require right warnings for XClass definitions
- CWE-357
<15.10.16 || >=16.0.0-rc-1, <16.4.7 || >=16.5.0-rc-1, <16.10.2 · fixed in 15.10.16, 16.4.7, 16.10.2
GHSA-59w6-r9hm-439h · CVE-2025-49585 - CVSS 6.4 Medium
XWiki does not require right warnings for notification displayer objects
- CWE-357
>=15.9-rc-1, <15.10.16 || >=16.0.0-rc-1, <16.4.7 || >=16.5.0-rc-1, <16.10.2 · fixed in 15.10.16, 16.4.7, 16.10.2
GHSA-j7p2-87q3-44w7 · CVE-2025-49587 - CVSS 5.1 Medium
XWiki provides no warning when granting XWiki.Notifications.Code.NotificationEmailRendererClass admin right
- Privilege escalation
- CWE-357
<15.10.16 || >=16.0.0-rc-1, <16.4.7 || >=16.5.0-rc-1, <16.10.2 · fixed in 15.10.16, 16.4.7, 16.10.2
GHSA-ff6v-w58f-v97w · CVE-2025-49583 - CVSS 8.6 High
XWiki's required right warnings for macros are incomplete
- CWE-357
>=15.9-rc-1, <16.4.7 || >=16.5.0-rc-1, <16.10.3 || >=17.0.0-rc-1, <17.0.0 · fixed in 16.4.7, 16.10.3, 17.0.0
GHSA-c32m-27pj-4xcj · CVE-2025-49582 - CVSS 4.3 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-357
- CVSS 5.4 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-357
- CVSS 7.8 High
Microsoft Office Visio Remote Code Execution Vulnerability
- Microsoft 365 Apps for Enterprise
- Microsoft Office 2019
- CWE-357
- CVSS 5.4 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- Authentication bypass
- CWE-357
- CVSS 4.3 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-357
- CVSS 4.3 Medium
Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge for Android
- CWE-357
- CVSS 2.5 Low
Microsoft Edge (Chromium-based) Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- CWE-357
- CVSS 5.3 Medium
Microsoft Edge for Android Spoofing Vulnerability
- Microsoft Edge (Chromium-based)
- Microsoft Edge (Chromium-based) Extended Stable
- CWE-357
- CVSS 6.4 Medium
Element iOS is vulnerable due to missing decoration for events decrypted with untrusted Megolm sessions
- vector-im element-ios
- CWE-357
-
Luxion KeyShot: Luxion KeyShot versions prior to 10.1, Luxion KeyShot Viewer versions prior to 10.1…
- Luxion KeyShot
- Luxion KeyShot Viewer
- CWE-357
-
Rockwell Automation Arena Simulation Software: A maliciously crafted program file opened by an unsuspecting user of Rockwell Automation…
- Rockwell Automation Arena Simulation Software
- CWE-357