← Back
CWE-284

7,477 CVEs • Abstraction: Pillar

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

JSON object

Loading...

CVEs (7,477)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Cisco
1Thousandeyes Enterprise Agent
Jun 17, 2026
Aug 16, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerabil...Show more
A vulnerability in the CLI of Cisco ThousandEyes Enterprise Agent, Virtual Appliance installation type, could allow an authenticated, local attacker to elevate privileges to root on an affected device. This vulnerability is due to insufficient input validation of user-supplied CLI arguments. An attacker could exploit this vulnerability by authenticating to an affected device and using crafted commands at the prompt. A successful exploit could allow the attacker to execute arbitrary commands as root. The attacker must have valid credentials on the affected device.Show less
1Intel
1Unite
Jun 17, 2026
Aug 11, 2023
N/A· v4
5.5 MEDIUM· v3
N/A· v2
Improper access control in the Intel Unite(R) android application before version 4.2.3504 may allow an authenticated user to potentially enable information disclosure via local access.
1Intel
67Compute Element Stk2mv64cc Firmware
Nuc Board Nuc7i3bnb FirmwareNuc Board Nuc7i3bnh Firmware+64 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Improper access control in some Intel(R) NUC BIOS firmware may allow a privileged user to potentially enable denial of service via local access.
1Intel
1Proset/wireless Wifi
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user to potentially enable escalation of privilege via local acces...Show more
Improper access control in firmware for some Intel(R) PROSet/Wireless WiFi software for Windows before version 22.220 HF (Hot Fix) may allow a privileged user to potentially enable escalation of privilege via local access.Show less
1Intel
1Ispc Software Installer
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper access control in some Intel(R) ISPC software installers before version 1.19.0 may allow an authenticated user to potentially enable escalation of privileges via local access.
1Intel
29Advisor For Oneapi
Cpu Runtime For Opencl ApplicationsDistribution For Python Programming Language+26 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper access control in some Intel(R) oneAPI Toolkit and component software installers before version 4.3.1.493 may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
1Ethernet Controller Rdma Driver For Linux
Jun 17, 2026
Aug 11, 2023
N/A· v4
9.8 CRITICAL· v3
N/A· v2
Improper access control in the Intel(R) Ethernet Controller RDMA driver for linux before version 1.9.30 may allow an unauthenticated user to potentially enable escalation of privilege via network access.
1Intel
1Unite
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper access control in the Intel(R) Unite(R) Hub software installer for Windows before version 4.2.34962 may allow an authenticated user to potentially enable escalation of privilege via local access.
1Intel
1Unison
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
Improper access control in some Intel(R) Unison(TM) software before version 10.12 may allow a privileged user to potentially enable escalation of privilege via network access.
3Debian
FedoraprojectIntel
139Debian Linux
FedoraMicrocode+136 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
4.4 MEDIUM· v3
N/A· v2
Improper access control in some 3rd Generation Intel(R) Xeon(R) Scalable processors may allow a privileged user to potentially enable information disclosure via local access.
1Intel
1Virtual Raid On Cpu
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper access control in some Intel(R) VROC software before version 8.0.0.4035 may allow an authenticated user to potentially enable escalation of privilege via local access.
3Debian
FedoraprojectIntel
5Debian Linux
FedoraKiller+2 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
2Arc A750 Firmware
Arc A770 Firmware
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.1 HIGH· v3
N/A· v2
Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an authenticated user to potentially enable denial of service or...Show more
Improper access control for some Intel(R) Arc(TM) graphics cards A770 and A750 Limited Edition sold between October of 2022 and December of 2022 may allow an authenticated user to potentially enable denial of service or infomation disclosure via local access.Show less
1Intel
114Atom C3308 Firmware
Atom C3336 FirmwareAtom C3338 Firmware+111 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper access control in the BIOS firmware for some Intel(R) Processors may allow a privileged user to potentially enable escalation of privilege via local access.
1Intel
1Converged Security Management Engine Firmware
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Improper access control in the Intel(R) CSME software installer before version 2239.3.7.0 may allow an authenticated user to potentially enable escalation of privilege via local access.
3Debian
FedoraprojectIntel
5Debian Linux
FedoraKiller+2 more
Jun 17, 2026
Aug 11, 2023
N/A· v4
6.7 MEDIUM· v3
N/A· v2
Improper access control for some Intel(R) PROSet/Wireless WiFi and Killer(TM) WiFi software may allow a privileged user to potentially enable escalation of privilege via local access.
1Solarwinds
1Serv U
Jun 17, 2026
Aug 11, 2023
N/A· v4
7.2 HIGH· v3
N/A· v2
A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this actio...Show more
A vulnerability has been identified within Serv-U 15.4 that, if exploited, allows an actor to bypass multi-factor/two-factor authentication. The actor must have administrator-level access to Serv-U to perform this action.  Show less
1Nextcloud
1Nextcloud Server
Jun 17, 2026
Aug 10, 2023
N/A· v4
7.8 HIGH· v3
N/A· v2
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a...Show more
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 20.0.0 and prior to versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a missing password confirmation allowed an attacker, after successfully stealing a session from a logged in user, to create app passwords for the victim. Nextcloud server versions 25.0.9, 26.0.4, and 27.0.1 and Nextcloud Enterprise Server versions 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.9, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1 contain a patch for this issue. No known workarounds are available.Show less
1Nextcloud
1Nextcloud Server
Jun 17, 2026
Aug 10, 2023
N/A· v4
7.7 HIGH· v3
N/A· v2
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, a...Show more
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 19.0.0 and prior to versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.8, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1, a malicious user could delete any personal or global external storage, making them inaccessible for everyone else as well. Nextcloud server versions 25.0.9, 26.0.4, and 27.0.1 and Nextcloud Enterprise Server versions 19.0.13.10, 20.0.14.15, 21.0.9.13, 22.2.10.14, 23.0.12.9, 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1 contain a patch for this issue. As a workaround, disable app files_external. This also makes the external storage inaccessible but retains the configurations until a patched version has been deployed.Show less
1Nextcloud
1Nextcloud Server
Jun 17, 2026
Aug 10, 2023
N/A· v4
4.3 MEDIUM· v3
N/A· v2
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an image was shared without d...Show more
Nextcloud Server provides data storage for Nextcloud, an open source cloud platform. Starting in version 24.0.4 and prior to versions 25.0.9, 26.0.4, and 27.0.1, when a folder with images or an image was shared without download permissions, the user could add the image inline into a text file and download it. Nextcloud Server versions 25.0.9, 26.0.4, and 27.0.1 and Nextcloud Enterprise Server versions 24.0.12.5, 25.0.9, 26.0.4, and 27.0.1 contain a patch for this issue. No known workarounds are available.Show less