cwe-288
Safeguard articles tagged "cwe-288" — guides, analysis, and best practices for software supply chain and application security.
21 articles
CVE-2020-10148: SolarWinds Orion Authentication Bypass Vulnerability
CVE-2020-10148 affects SolarWinds Orion and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2021-11-03.
CVE-2022-40684: Fortinet Multiple Products Authentication Bypass Vulnerability
CVE-2022-40684 affects Fortinet Multiple Products and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2022-10-11.
CVE-2023-20269: Cisco Adaptive Security Appliance and Firepower Threat Defense Unauthorized Access Vulnerability
CVE-2023-20269 affects Cisco Adaptive Security Appliance and Firepower Threat Defense and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-09-13.
CVE-2023-42793: JetBrains TeamCity Authentication Bypass Vulnerability
CVE-2023-42793 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-10-04.
CVE-2023-46747: F5 BIG-IP Configuration Utility Authentication Bypass Vulnerability
CVE-2023-46747 affects F5 BIG-IP Configuration Utility and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2023-10-31.
CVE-2024-1709: ConnectWise ScreenConnect Authentication Bypass Vulnerability
CVE-2024-1709 affects ConnectWise ScreenConnect and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-02-22.
CVE-2024-27198: JetBrains TeamCity Authentication Bypass Vulnerability
CVE-2024-27198 affects JetBrains TeamCity and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2024-03-07.
CVE-2024-55591: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2024-55591 affects Fortinet FortiOS and FortiProxy and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-01-14.
CVE-2025-24472: Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability
CVE-2025-24472 affects Fortinet FortiOS and FortiProxy and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-03-18.
CVE-2025-4427: Ivanti Endpoint Manager Mobile (EPMM) Authentication Bypass Vulnerability
CVE-2025-4427 affects Ivanti Endpoint Manager Mobile (EPMM) and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-05-19.
CVE-2025-57819: Sangoma FreePBX Authentication Bypass Vulnerability
CVE-2025-57819 affects Sangoma FreePBX and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-08-29.
CVE-2025-2747: Kentico Xperience CMS Authentication Bypass Using an Alternate Path or Channel Vulnerability
CVE-2025-2747 affects Kentico Xperience CMS and is listed in CISA's Known Exploited Vulnerabilities catalog, meaning exploitation has been observed in the wild. Added 2025-10-20.
Self-healing security runs on Safeguard.
Your first fix PR is minutes away.
No sales call required, even your agent can complete the purchase over MCP.