Skip to content
OpenAdvisories

Weakness (CWE)

CWE-287: Improper Authentication

Class Draft Mapping discouraged

When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.

How to prevent it (1 mitigation)

  1. Architecture and Design

    Use an authentication framework or library such as the OWASP ESAPI Authentication feature.

Source: MITRE CWE-287

All Critical High Medium Low Exploited only Public exploit

46 results · Clear filters · Feed

  • Critical 9.8
    CVE-2018-10561 Exploited Public exploit EPSS 93%

    An issue was discovered on Dasan GPON home routers. It is possible to bypass authentication simply by appending "?image…

    KEV Mar 31, 2022
  • Critical 9.8
    CVE-2015-1187 Exploited Public exploit EPSS 83%

    The ping tool in multiple D-Link and TRENDnet devices allow remote attackers to execute arbitrary code via the ping_add…

    KEV Mar 25, 2022
  • Critical 9.8
    CVE-2016-7836 Exploited EPSS 19%

    SKYSEA Client View Ver.11.221.03 and earlier allows remote code execution via a flaw in processing authentication on th…

    Sky SKYSEA Client View
    KEV Oct 14, 2025
  • Critical 9.8
    CVE-2017-7921 Exploited Public exploit Scanner template EPSS 100%

    An Improper Authentication issue was discovered in Hikvision DS-2CD2xx2F-I Series V5.2.0 build 140721 to V5.4.0 build 1…

    KEV Mar 5, 2026
  • Critical 9.8
    CVE-2015-7755 Exploited Public exploit EPSS 61%

    Juniper ScreenOS 6.2.0r15 through 6.2.0r18, 6.3.0r12 before 6.3.0r12b, 6.3.0r13 before 6.3.0r13b, 6.3.0r14 before 6.3.0…

    KEV Oct 2, 2025
  • Critical 9.8
    CVE-2013-0625 Exploited Public exploit EPSS 94%

    Adobe ColdFusion 9.0, 9.0.1, and 9.0.2, when a password is not configured, allows remote attackers to bypass authentica…

    KEV Mar 7, 2022