Advisories · Weakness
CWE-693.
Every Advisory and CVE whose sources give the weakness CWE-693, newest first.
- CVSS 8.8 High
Jenkins Azure AD Plugin allows bypassing CSRF protection for any URL
- Cross-site request forgery (CSRF)
- CWE-693
<180.v8b1e80e6f242 · fixed in 180.v8b1e80e6f242
GHSA-x77r-7m5w-pqq2 · CVE-2021-21679 - CVSS 8.8 High
Remote code execution vulnerability in Jenkins Templating Engine Plugin
- CWE-693
<2.2 · fixed in 2.2
GHSA-p6qc-37hq-wqr6 · CVE-2021-21646 - CVSS 9.9 CriticalCritical · CVSS 9+
Sandbox bypass vulnerability in Jenkins Script Security Plugin
- CWE-693
>=1.67, <1.75 || <1.66.5 · fixed in 1.75, 1.66.5
GHSA-ccr8-4xr7-cgj3 · CVE-2020-2279 - CVSS 8.8 High
Sandbox bypass vulnerability in Script Security Plugin
- Broken access control
- CWE-693
<1.71 · fixed in 1.71
GHSA-qvhf-3567-pc4v · CVE-2020-2135 - CVSS 8.8 High
Sandbox bypass vulnerability in Script Security Plugin
- Broken access control
- CWE-693
<1.7.1 · fixed in 1.7.1
GHSA-gj3q-p8cm-26rm · CVE-2020-2134 - CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Protection Mechanism Failure in Jenkins Script Security Plugin
- CWE-693
<1.50 · fixed in 1.50
GHSA-784j-h234-m56x · CVE-2019-1003000 - CVSS 9.9 CriticalCritical · CVSS 9+
Script security sandbox bypass in Matrix Project Plugin
- CWE-693
<1.14 · fixed in 1.14
GHSA-qxf8-8837-hq7w · CVE-2019-1003031 - CVSS 9.9 CriticalCritical · CVSS 9+
Script security sandbox bypass in Jenkins Job DSL Plugin
- CWE-693
<1.72 · fixed in 1.72
GHSA-5r74-pgmq-92mm · CVE-2019-1003034 - CVSS 9.9 CriticalCritical · CVSS 9+
Script security sandbox bypass in Jenkins Email Extension Plugin
- CWE-693
<2.65 · fixed in 2.65
GHSA-qwm8-vgm6-f86p · CVE-2019-1003032 - CVSS 8.8 High
Jenkins Groovy Plugin sandbox bypass vulnerability
- CWE-693
<2.2 · fixed in 2.2
GHSA-fm3j-r98g-97jh · CVE-2019-1003033 - CVSS 9.9 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Sandbox bypass in Jenkins Pipeline: Groovy Plugin
- CWE-693
<2.64 · fixed in 2.64
GHSA-r6mc-mrvr-23cr · CVE-2019-1003030 - CVSS 9.9 CriticalCritical · KEV, CVSS 9+, CVSS 7+ and EPSSKEV
Sandbox bypass in Script Security Plugin
- CWE-693
<1.54 · fixed in 1.54
GHSA-xvxq-hq48-xphm · CVE-2019-1003029 - CVSS 8.8 HighCritical · CVSS 7+ and EPSS
Sandbox Bypass in Script Security Plugin
- CWE-693
<1.51 · fixed in 1.51
GHSA-x5jm-rj37-5qh7 · CVE-2019-1003005 - CVSS 4.1 Medium
Cisco Umbrella Secure Web Gateway File Decryption Bypass Vulnerability
- Cisco Umbrella Insights Virtual Appliance
- CWE-693
- CVSS 6.5 Medium
Philips Vue PACS Protection Mechanism Failure
- Philips Vue PACS
- Philips Vue MyVue
- CWE-693
- CVSS 8.5 High
Rockwell Automation FactoryTalk Services Platform Protection Mechanism Failure
- Rockwell Automation FactoryTalk Services Platform
- CWE-693
- CVSS 8.8 High
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
- CWE-693
<561.va_ce0de3c2d69 · fixed in 561.va_ce0de3c2d69
GHSA-7w2w-fwpf-9m4h · CVE-2022-25181 - CVSS 8.8 High
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
- CWE-693
<561.va_ce0de3c2d69 · fixed in 561.va_ce0de3c2d69
GHSA-pfwp-q984-w7wh · CVE-2022-25183 - CVSS 8.8 High
Jenkins Pipeline: Deprecated Groovy Libraries Plugin Protection Mechanism Failure
- CWE-693
<561.va_ce0de3c2d69 · fixed in 561.va_ce0de3c2d69
GHSA-7rcw-fwfh-2h2g · CVE-2022-25182 - CVSS 3.1 Low
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin
- CWE-693
<336.v182c0fbaaeb7 · fixed in 336.v182c0fbaaeb7
GHSA-fm6q-97gw-c4wh · CVE-2022-25186 - CVSS 5.3 Medium
Agent-to-controller security bypass in Jenkins HashiCorp Vault Plugin allows reading arbitrary files
- CWE-693
<351.vdb_f83a_1c6a_9d · fixed in 351.vdb_f83a_1c6a_9d
GHSA-2587-w93g-63m2 · CVE-2022-25197 - CVSS 5.8 Medium
Cisco Umbrella Secure Web Gateway File Inspection Bypass Vulnerability
- Cisco Umbrella Insights Virtual Appliance
- CWE-693
- CVSS 5.3 Medium
Protection mechanism failure in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- CWE-693
- CVSS 7.7 High
Contrail Service Orchestration: Tenants able to see other tenants policies via REST API interface
- Juniper Networks Contrail Service Orchestration
- CWE-693
- CVSS 7.5 High
Agent-to-controller security bypass in Jenkins Debian Package Builder Plugin
- Privilege escalation
- Information disclosure
<=1.6.11 · no fixed version yet
GHSA-8xjp-rp29-v5j8 · CVE-2022-23118 - CVSS 4.9 Medium
Protection mechanism failure in Dell Networking OS10
- Dell Networking OS10
- CWE-693
-
Protection mechanism failure in 1st Gen AMD EPYC™ and others
- 1st Gen AMD EPYC™
- 2nd Gen AMD EPYC™
- CWE-693
- CVSS 5.3 Medium
Protection mechanism failure in Oracle Corporation Java SE JDK and JRE
- Oracle Corporation Java SE JDK and JRE
- CWE-693
- CVSS 5.3 Medium
Junos OS: When using J-Web with HTTP an attacker may retrieve encryption keys via Person-in-the-Middle attacks.
- Juniper Networks Junos OS
- Weak cryptography or TLS
- CWE-300
- CVSS 6.5 Medium
Junos OS and Junos OS Evolved: An IS-IS adjacency might be taken down if a bad hello PDU is received for an existing adjacency causing a DoS
- Juniper Networks Junos OS
- Juniper Networks Junos OS Evolved
- CWE-693
- CVSS 4.7 Medium
Cisco IOS XE Software H.323 Application Level Gateway Bypass Vulnerability
- Cisco IOS XE Software
- CWE-693
-
Groovy Sandbox escape in Eclipse Keti
- eclipse keti
- CWE-693
- CVSS 6.8 Medium
Protection mechanism failure in Lenovo BIOS
- Lenovo BIOS
- CWE-693
- CVSS 2.0 Low
A user without PR can reset user authentication failures information
- Authentication bypass
- Broken access control
>=11.6, <12.6.8 || >=12.7, <12.10.4 · fixed in 12.6.8, 12.10.4
GHSA-m738-3rc4-5xv3 · CVE-2021-32729 - CVSS 5.0 Medium
Cisco Webex Meetings and Webex Meetings Server Multimedia Sharing Security Bypass Vulnerability
- Cisco WebEx Meetings Server
- CWE-693
- CVSS 8.1 High
Protection mechanism failure in TP-Link Archer A7
- TP-Link Archer A7
- CWE-693
- CVSS 5.8 Medium
Multiple Cisco Products Snort TCP Fast Open File Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-693
- CVSS 5.8 Medium
Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-693
-
Protection mechanism failure in Siemens SICAM A8000 CP-8000 and others
- Siemens SICAM A8000 CP-8000
- Siemens SICAM A8000 CP-8021
- CWE-693
- CVSS 6.7 Medium
Cisco FXOS Software for Firepower 4100/9300 Series Appliances Secure Boot Bypass Vulnerability
- Cisco Firepower Extensible Operating System (FXOS)
- CWE-693
- CVSS 6.7 Medium
Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software for Firepower 1000/2100 Series Appliances Secure Boot Bypass Vulnerabilities
- Cisco Adaptive Security Appliance (ASA) Software
- CWE-693
- CVSS 5.8 Medium
Multiple Cisco Products SNORT HTTP Detection Engine File Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-693
- CVSS 5.6 Medium
Context isolation bypass in Electron
- Information disclosure
- CWE-693
>=8.0.0-beta.0, <8.5.2 || >=9.0.0-beta.0, <9.3.1 || >=10.0.0-beta.0, <10.1.2 || >=11.0.0-beta.0, <11.0.0-beta.6 · fixed in 8.5.2, 9.3.1, 10.1.2, 11.0.0-beta.6
GHSA-56pc-6jqp-xqj8 · CVE-2020-15215 - CVSS 7.5 High
Unpreventable top-level navigation
- CWE-20
- CWE-693
>=8.0.0-beta.0, <8.5.1 || >=9.0.0-beta.0, <9.3.0 || >=10.0.0-beta.0, <10.0.1 · fixed in 8.5.1, 9.3.0, 10.0.1
GHSA-2q4g-w47c-4674 · CVE-2020-15174 - CVSS 5.0 Medium
Philips Clinical Collaboration Platform Protection Mechanism Failure
- Philips Clinical Collaboration Platform
- CWE-693
- CVSS 6.7 Medium
Protection Mechanism Failure in ENS for Windows
- McAfee LLC Endpoint Security for Windows
- CWE-693
- CVSS 7.5 High
Denial of Service in http-proxy
- CWE-184
- CWE-693
<1.18.1 · fixed in 1.18.1
GHSA-6x33-pw7p-hmpq - CVSS 6.8 Medium
Protection mechanism failure in Dell CPG BIOS
- Dell CPG BIOS
- CWE-693
- CVSS 5.8 Medium
Cisco Firepower Threat Defense Software SSL/TLS URL Category Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-693
- CVSS 5.8 Medium
Multiple Cisco Products Snort HTTP Detection Engine File Policy Bypass Vulnerability
- Cisco Firepower Threat Defense Software
- CWE-693
- CVSS 6.8 Medium
McAfee processes not protected
- McAfee LLC McAfee Endpoint Security (ENS)
- CWE-693
-
Protection mechanism failure in Becton, Dickinson and Company (BD) Pyxis MedStation ES System and others
- Becton, Dickinson and Company (BD) Pyxis MedStation ES System
- Becton, Dickinson and Company (BD) Pyxis Anesthesia (PAS) ES System
- CWE-693
- CVSS 8.1 High
Protection mechanism failure in TP-Link Archer A7
- TP-Link Archer A7
- CWE-693
-
Protection mechanism failure in GE Ultrasound Products
- GE Ultrasound Products
- CWE-693
-
Protection mechanism failure in Siemens SCALANCE S602 and others
- Siemens SCALANCE S602
- Siemens SCALANCE S612
- CWE-693
-
Protection mechanism failure in Siemens AG SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB… and others
- Siemens AG SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR32..-.....-.... MLFB 6SR4...-.....-.... MLFB 6SR5...-.....-.... With option A30 (HMIs 12 inches or larger)
- Siemens AG SINAMICS PERFECT HARMONY GH180 Drives MLFB 6SR325.-.....-.... (High Availability)
- CWE-693
- CVSS 4.6 Medium
Medtronic Valleylab FT10 and LS10 Protection Mechanism Failure
- Medtronic Valleylab FT10 Energy Platform (VLFT10GEN)
- Medtronic Valleylab LS10 Energy Platform (VLLS10GEN—not available in the United States)
- CWE-693
- CVSS 5.8 Medium
Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities
- Cisco FireSIGHT System Software
- CWE-693
- CVSS 5.8 Medium
Cisco Firepower System Software Detection Engine RTF and RAR Malware and File Policy Bypass Vulnerabilities
- Cisco FireSIGHT System Software
- CWE-693
- CVSS 6.5 Medium
Cisco HyperFlex Software Cross-Frame Scripting Vulnerability
- Cisco HyperFlex HX-Series
- CWE-693