Skip to content
OpenAdvisories

Weakness (CWE)

CWE-799: Improper Control of Interaction Frequency

Class Incomplete

The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

Source: MITRE CWE-799

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-54321 Public exploit

    In Ascertia SigningHub through 8.6.8, there is a lack of rate limiting on the reset password function, leading to an em…

  • Critical 9.1
    CVE-2024-48942

    The Syracom Secure Login (2FA) plugin for Jira, Confluence, and Bitbucket through 3.1.4.5 allows remote attackers to ea…

  • Critical 9.8
    CVE-2024-6890

    Journyx Unauthenticated Password Reset Bruteforce

    Password reset tokens are generated using an insecure source of randomness. Attackers who know the username of the Journyx installation user can bruteforce the password reset and change the administrator password.

    Journyx Journyx (jtime)