Advisories · Weakness
CWE-650.
Every Advisory and CVE whose sources give the weakness CWE-650, newest first.
- CVSS 4.3 Medium
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- CWE-650
- CVSS 5.9 Medium
IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities
- IBM WebSphere Application Server
- CWE-650
- CVSS 5.3 Medium
zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server side
- zhinianboke xianyu-auto-reply
- CWE-650
- CVSS 4.3 Medium
IRIS has a Cross-Site Request Forgery (CSRF) issue
- dfir-iris iris-web
- CWE-650
- CVSS 8.1 High
ChurchCRM: CSRF via legacy GET-delete pages (FundRaiserDelete.php, PropertyTypeDelete.php, NoteDelete.php)
- CRM
- Cross-site request forgery (CSRF)
- CWE-650
- CVSS 3.7 Low
IBM WebSphere Application Server information disclosure
- IBM WebSphere Application Server
- IBM WebSphere Application Server Liberty
- CWE-650
- CVSS 8.3 High
Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security.
- Dell Avamar Server
- Dell Avamar Virtual Edition
- CWE-650
- CVSS 4.3 Medium
HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)
- SAP_SE SAP S/4 HANA (Manage Bank Statements)
- CWE-650
- CVSS 5.9 Medium
IBM Aspera Faspex bypass security
- IBM Aspera Faspex
- CWE-650
- CVSS 6.8 Medium
IBM Aspera Faspex bypass security
- IBM Aspera Faspex
- CWE-650
- CVSS 8.7 High
IBM Security Verify Access information disclosure
- IBM Security Verify Access Container
- IBM Security Verify Access Appliance
- CWE-650
- CVSS 5.3 Medium
IBM PowerSC weak security
- IBM PowerSC
- CWE-650
- CVSS 5.3 Medium
Insecure Methods Vulnerability
- SolarWinds SEM
- CWE-650