Advisories · Weakness
CWE-602.
Every Advisory and CVE whose sources give the weakness CWE-602, newest first.
- CVSS 5.3 Medium
IBM OpenPages with Watson improper input validation
- IBM OpenPages with Watson
- CWE-602
- CVSS 6.3 Medium
Ivanti Connect Secure: Improper access control in the certificate management component of Ivanti Connect Secure…
- Ivanti Connect Secure
- Ivanti Policy Secure
- CWE-602
- CVSS 8.3 High
Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
- CVSS 5.3 Medium
Salesforce OmniStudio: Client-Side Enforcement of Server-Side Security vulnerability in Salesforce OmniStudio…
- Salesforce OmniStudio
- CWE-602
- CVSS 6.9 Medium
Client-side enforcement of server-side security issue exists in wivia 5 all versions.
- UCHIDA YOKO CO., LTD. wivia 5
- CWE-602
- CVSS 7.1 High
IBM Aspera Faspex data modification
- IBM Aspera Faspex
- CWE-602
- CVSS 7.1 High
Cisco Unified Intelligence Center Privilege Escalation Vulnerability
- Cisco Unified Contact Center Express
- Cisco Unified Intelligence Center
- CWE-602
- CVSS 9.4 CriticalCritical · CVSS 9+
Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
- CVSS 9.4 CriticalCritical · CVSS 9+
Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
- CVSS 9.4 CriticalCritical · CVSS 9+
Siemens RUGGEDCOM ROX MX5000: A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions < V2.16.5)…
- Siemens RUGGEDCOM ROX MX5000
- Siemens RUGGEDCOM ROX MX5000RE
- CWE-602
- CVSS 6.3 Medium
Dígitro NGC Explorer Password Transmission client-side enforcement of server-side security
- Dígitro NGC Explorer
- CWE-602
- CVSS 6.2 Medium
Out-of-bounds data read vulnerability in the authorization module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Huawei HarmonyOS
- CWE-602
- CVSS 6.4 Medium
Multi Uploaders Multiple File Upload: The Multiple File Upload add-on component 3.1.0 for OutSystems is vulnerable to…
- Multi Uploaders Multiple File Upload
- CWE-602
- CVSS 6.5 Medium
IBM Cloud Pak for Business Automation denial of service
- IBM Cloud Pak for Business Automation
- CWE-602
- CVSS 8.2 High
Captcha Bypass Vulnerability in Meon KYC solutions
- Meon KYC solutions
- CWE-602
- CVSS 7.7 High
W.
- W. W. Norton InQuizitive
- CWE-602
- CVSS 4.8 Medium
In Zammad 6.4.x before 6.4.2, there is client-side enforcement of server-side security.
- Zammad
- CWE-602
- CVSS 4.2 Medium
Fortinet FortiSandbox: A client-side enforcement of server-side security vulnerability [CWE-602] in Fortinet…
- Fortinet FortiSandbox
- CWE-602
- CVSS 8.1 High
An issue in account management interface in Netsweeper Server v.8.2.6 and earlier (fixed in v.8.2.7) allows unauthorized changes to the "Account Owner" field due to client-side-only restrictions and…
- CWE-602
- CVSS 9.8 CriticalCritical · CVSS 9+
Vasion Print (formerly PrinterLogic) before Virtual Appliance Host 1.0.735 Application 20.0.1330 mishandles Client Inter-process Security V-2022-004.
- CWE-602
- CVSS 6.5 Medium
IBM Robotic Process Automation security bypass
- IBM Robotic Process Automation
- IBM Robotic Process Automation for Cloud Pak
- CWE-602
- CVSS 5.8 Medium
Umbraco Forms's Short and Long Answer Fields Are Not Validated Server-Side For Maximum Length
- CWE-20
- CWE-602
<10.5.7 || >=11.0.0-rc1, <13.2.2 || >=14.0.0-beta001, <14.1.2 · fixed in 10.5.7, 13.2.2, 14.1.2
GHSA-9v8m-qv22-f268 · CVE-2025-23041 - CVSS 9.8 CriticalCritical · CVSS 9+
TECNO com.transsion.applock: A logic vulnerability in the the mobile application (com.transsion.applock) can lead to…
- TECNO com.transsion.applock
- CWE-602
- CVSS 7.1 High
Ivanti Connect Secure: Insufficient server-side controls in Secure Application Manager of Ivanti Connect Secure…
- Ivanti Connect Secure
- CWE-602
- CVSS 2.0 Low
Password Policy Bypass Vulnerability in Fides Webserver User Accept Invite API
- CWE-602
<2.50.0 · fixed in 2.50.0
GHSA-v7vm-rhmg-8j2r · CVE-2024-52008 - CVSS 4.4 Medium
Axis Communications AB AXIS Camera Station Pro: Seth Fogie, member of AXIS Camera Station Pro Bug Bounty Program has found that it is…
- Axis Communications AB AXIS Camera Station Pro
- Axis Communications AB AXIS Camera Station
- CWE-602
- CVSS 7.1 High
Fortinet FortiManager: A client-side enforcement of server-side security in Fortinet FortiAnalyzer-BigData at…
- Fortinet FortiManager
- Fortinet FortiAnalyzer
- CWE-602
- CVSS 4.3 Medium
Cisco Identity Services Engine Authorization Bypass Vulnerability
- Cisco Identity Services Engine Software
- CWE-602
- CVSS 4.9 Medium
IBM Business Automation Workflow improper input validation
- IBM Business Automation Workflow
- CWE-602
- CVSS 8.8 High
Ivanti Workspace Control: Insufficient server-side controls in the management console of Ivanti Workspace Control…
- Ivanti Workspace Control
- CWE-602
- CVSS 8.3 High
CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security
- CyberArk Identity Management
- CWE-602
- CVSS 3.5 Low
Cross-site scripting in Honeywell PC42t, PC42tp, and PC42d (Common Firmware)
- Honeywell PC42t, PC42tp, and PC42d (Common Firmware)
- Cross-site scripting (XSS)
- CWE-602
- CVSS 7.1 High
A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1).
- Siemens SINEMA Remote Connect Server
- CWE-602
- CVSS 4.1 Medium
Fortinet FortiPortal: A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0…
- Fortinet FortiPortal
- CWE-602
- CVSS 5.3 Medium
WordPress WP Ultimate Review plugin <= 2.2.5 - Review Score Manipulation vulnerability
- Wpmet Wp Ultimate Review
- CWE-602
- CVSS 5.3 Medium
WordPress Zero Spam for WordPress plugin <= 5.5.6 - Bypass Spam Protection vulnerability
- Highfivery LLC Zero Spam
- CWE-602
- CVSS 5.3 Medium
WordPress weForms plugin <= 1.6.20 - Form Submission Restriction Bypass vulnerability
- weForms
- CWE-602
- CVSS 8.6 High
Fortinet FortiSandbox: A client-side enforcement of server-side security vulnerability in Fortinet FortiSandbox…
- Fortinet FortiSandbox
- CWE-602
- CVSS 8.8 High
Client-Side Enforcement of Server-Side Security in Delta Electronics DIAEnergie
- Delta Electronics DIAEnergie
- CWE-602
- CVSS 5.3 Medium
UserPro <= 5.1.6 - Disabled Membership Registration Bypass
- UserPro - Community and User Profile WordPress Plugin
- CWE-602
- CVSS 5.4 Medium
Gallagher Command Centre: Client-Side enforcement of Server-Side security for the Command Centre server could be…
- Gallagher Command Centre
- CWE-602
- CVSS 6.2 Medium
Fortinet FortiAnalyzer: A client-side enforcement of server-side security [CWE-602] vulnerability in Fortinet…
- Fortinet FortiAnalyzer
- Fortinet FortiManager
- CWE-602
- CVSS 5.5 Medium
Insufficient Validation on Override Codes for Always-Enabled WARP Mode
- Cloudflare WARP Client
- CWE-602
- CVSS 6.1 Medium
Zoom Video Communications, Inc. Zoom Clients: Client-side enforcement of server-side security in Zoom clients before 5.14.10 may allow…
- Zoom Video Communications, Inc. Zoom Clients
- CWE-602
- CVSS 4.3 Medium
Foundry workspace-server Developer Mode Authorization Bypass
- com.palantir.workspace:workspace
- CWE-602
- CVSS 5.4 Medium
Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities
- Cisco Identity Services Engine Software
- CWE-602
- CVSS 5.4 Medium
Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities
- Cisco Identity Services Engine Software
- CWE-602
- CVSS 5.4 Medium
Cisco Identity Services Engine Arbitrary File Delete and File Read Vulnerabilities
- Cisco Identity Services Engine Software
- CWE-602
- CVSS 9.8 CriticalCritical · CVSS 9+
Yellowbrik PEC-1864 authentication bypass
- Lynx Technik AG Yellowbrik
- CWE-602
- CVSS 6.5 Medium
Google Chrome: Insufficient policy enforcement in DevTools in Google Chrome prior to 110.0.5481.77…
- Google Chrome
- CWE-602
- CVSS 5.3 Medium
PrivateContent <= 8.4.3 - Protection Mechanism Bypass
- LCWeb PrivateContent
- CWE-602
- CVSS 6.5 Medium
Google Chrome: Insufficient policy enforcement in custom tabs in Google Chrome on Android prior to…
- Google Chrome
- CWE-602
- CVSS 7.4 High
Google Chrome: Insufficient policy enforcement in developer tools in Google Chrome prior to…
- Google Chrome
- CWE-602
- CVSS 6.5 Medium
Google Chrome: Insufficient policy enforcement in Extensions API in Google Chrome prior to 105.0.5195.52…
- Google Chrome
- CWE-602
- CVSS 9.1 CriticalCritical · CVSS 9+
Cognex 3D-A1000 Dimensioning System Client-Side Enforcement of Server-Side Security
- Cognex 3D-A1000 Dimensioning System
- CWE-602
- CVSS 6.3 Medium
Unisphere for PowerMax versions before 9.2.3.15 contain a privilege escalation vulnerability.
- Dell Unisphere for PowerMax
- CWE-602
- CVSS 6.3 Medium
Unisphere for PowerMax versions prior to 9.2.2.2 contains a privilege escalation vulnerability.
- Dell Unisphere for PowerMax
- CWE-602
- CVSS 9.6 CriticalCritical · CVSS 9+
Cisco Unified Contact Center Management Portal and Unified Contact Center Domain Manager Privilege Escalation Vulnerability
- Cisco Unified Contact Center Domain Manager
- CWE-602
- CVSS 8.1 High
Dell Unisphere for PowerMax versions prior to 9.2.1.6 contain an Authorization Bypass Vulnerability.
- Dell Unisphere for PowerMax
- CWE-602
- CVSS 2.7 Low
Dell EMC iDRAC9 versions prior to 4.40.00.00 contain an improper authentication vulnerability.
- Integrated Dell Remote Access Controller (iDRAC)
- CWE-602