CWE-275: Permission Issues
ID
CWE-275
Status
Draft
Number of CVEs
94
Weaknesses in this category are related to improper assignment or handling of permissions.
Relationships
| View | Weakness | ||||||
|---|---|---|---|---|---|---|---|
| # ID | Name | # ID | Name | Abstraction | Structure | Status | |
| CWE-699 | Software Development | CWE-276 | Incorrect Default Permissions | Base | Simple | Draft | |
| CWE-699 | Software Development | CWE-277 | Insecure Inherited Permissions | Variant | Simple | Draft | |
| CWE-699 | Software Development | CWE-278 | Insecure Preserved Inherited Permissions | Variant | Simple | Incomplete | |
| CWE-699 | Software Development | CWE-279 | Incorrect Execution-Assigned Permissions | Variant | Simple | Draft | |
| CWE-699 | Software Development | CWE-280 | Improper Handling of Insufficient Permissions or Privileges | Base | Simple | Draft | |
| CWE-699 | Software Development | CWE-281 | Improper Preservation of Permissions | Base | Simple | Draft | |
| CWE-699 | Software Development | CWE-618 | Exposed Unsafe ActiveX Method | Variant | Simple | Incomplete | |
| CWE-699 | Software Development | CWE-766 | Critical Data Element Declared Public | Base | Simple | Incomplete | |
| CWE-699 | Software Development | CWE-767 | Access to Critical Private Variable via Public Method | Base | Simple | Incomplete | |
CVEs Published
CVSS Severity
CVSS Severity - By Year
CVSS Base Score
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | Exploits | PoC | Pubblication Date | Modification Date |
|---|---|---|---|---|---|---|---|---|---|---|---|
| # CVE | Description | CVSS | EPSS | EPSS Trend (30 days) | Affected Products | Weaknesses | Security Advisories | PoC | Pubblication Date | Modification Date |
Loading...