Skip to content
OpenAdvisories

Weakness (CWE)

CWE-330: Use of Insufficiently Random Values

Class Mapping discouraged

The product uses insufficiently random numbers or values in a security context that depends on unpredictable numbers.

How to prevent it (3 mitigations)

  1. Architecture and Design

    Use a well-vetted algorithm that is currently considered to be strong by experts in the field, and select well-tested implementations with adequate length seeds.

    In general, if a pseudo-random number generator is not advertised as being cryptographically secure, then it is probably a statistical PRNG and should not be used in security-sensitive contexts.

    Pseudo-random number generators can produce predictable numbers if the generator is known and the seed can be guessed. A 256-bit seed is a good starting point for producing a "random enough" number.

  2. Implementation

    Consider a PRNG that re-seeds itself as needed from high quality pseudo-random output sources, such as hardware devices.

  3. Architecture and Design, Requirements

    Use products or modules that conform to FIPS 140-2 [REF-267] to avoid obvious entropy problems. Consult FIPS 140-2 Annex C ("Approved Random Number Generators").

Source: MITRE CWE-330

All Critical High Medium Low Exploited only Public exploit

7 results · Clear filters · Feed

  • Medium 4.8
    CVE-2026-106074 Public exploit

    A flaw in Node.js `crypto` causes the internal entropy caches used by `crypto.randomUUID()`, `crypto.randomUUIDv7()`, a…

    nodejs node nodejs nodejs Debian Ubuntu Alpine
  • Critical 9.0
    CVE-2026-11374 Public exploit

    Account Takeover via Predictable SSO Ticket Generation

    In ManageEngine ADSelfService Plus, RecoveryManager Plus, M365 Manager Plus, and ADAudit Plus, the SSO tickets generated to authenticate that session could be predicted by an unauthenticated user, leading to account takeover.

    Zohocorp ManageEngine ADSelfService Plus ManageEngine ADAudit Plus manageengine_m365_manager_plus
  • Critical 9.4
    CVE-2025-7783 Public exploit

    Usage of unsafe random function in form-data for choosing boundary

    Use of Insufficiently Random Values vulnerability in form-data allows HTTP Parameter Pollution (HPP). This vulnerability is associated with program files lib/form_data.Js. This issue affects form-data: < 2.5.4, 3.0.0 - 3.0.3, 4.0.0 - 4.0.3.

    node-form-data node-form-data form-data Debian Ubuntu npm
  • Unscored —
    CVE-2020-25705 Public exploit

    A flaw in ICMP packets in the Linux kernel may allow an attacker to quickly scan open UDP ports. This flaw allows an of…

    linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  • Critical 9.8
    CVE-2019-5420 Public exploit EPSS 89%

    Use of Insufficiently Random Values in Railties Allows Remote Code Execution

    A remote code execution vulnerability in development mode Rails <5.2.2.1, <6.0.0.beta3 can allow an attacker to guess the automatically generated development mode secret token. This secret token can be used in combination with other Rails internals to escalat…

    rails https://github.com/rails/rails rails railties Debian RubyGems
  • Unscored —
    CVE-2018-17888 Public exploit EPSS 30%

    NUUO CMS all versions 3.1 and prior, The application uses a session identification mechanism that could allow attackers…

    NUUO NUUO CMS
  • Unscored —
    CVE-2017-6026 Public exploit EPSS 32%

    A Use of Insufficiently Random Values issue was discovered in Schneider Electric Modicon PLCs Modicon M241, firmware ve…