access:pre-auth 类型相关 24643 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-21890 | Oracle Communications Converged Application Server 安全漏洞 — Communications Converged Application Server | 9.8 | Critical | 2023-01-17 |
| CVE-2023-21886 | Oracle VM VirtualBox 安全漏洞 — VM VirtualBox | 8.1 | High | 2023-01-17 |
| CVE-2023-21862 | Oracle Web Services Manager 安全漏洞 — Web Services Manager | 8.1 | High | 2023-01-17 |
| CVE-2023-21858 | Oracle E-Business Suite 安全漏洞 — Collaborative Planning | 7.5 | High | 2023-01-17 |
| CVE-2023-21854 | Oracle E-Business Suite 安全漏洞 — Sales Offline | 7.5 | High | 2023-01-17 |
| CVE-2023-21855 | Oracle E-Business Suite 安全漏洞 — Sales for Handhelds | 7.5 | High | 2023-01-17 |
| CVE-2023-21856 | Oracle E-Business Suite 安全漏洞 — iSetup | 7.5 | High | 2023-01-17 |
| CVE-2023-21857 | Oracle E-Business Suite 安全漏洞 — HCM Common Architecture | 7.5 | High | 2023-01-17 |
| CVE-2023-21851 | Oracle E-Business Suite 安全漏洞 — Marketing | 7.5 | High | 2023-01-17 |
| CVE-2023-21852 | Oracle E-Business Suite 安全漏洞 — Learning Management | 7.5 | High | 2023-01-17 |
| CVE-2023-21853 | Oracle E-Business Suite 安全漏洞 — Mobile Field Service | 7.5 | High | 2023-01-17 |
| CVE-2023-21849 | Oracle E-Business Suite 安全漏洞 — Applications DBA | 7.5 | High | 2023-01-17 |
| CVE-2023-21850 | Oracle E-Business Suite 安全漏洞 — Demantra Demand Management | 7.5 | High | 2023-01-17 |
| CVE-2023-21842 | Oracle WebLogic Server 安全漏洞 — WebLogic Server | 7.5 | High | 2023-01-17 |
| CVE-2023-21843 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 3.7 | Low | 2023-01-17 |
| CVE-2023-21839 | Oracle WebLogic Server 安全漏洞 — WebLogic Server | 7.5 | High | 2023-01-17 |
| CVE-2023-21841 | Oracle WebLogic Server 安全漏洞 — WebLogic Server | 7.5 | High | 2023-01-17 |
| CVE-2023-21835 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2023-01-17 |
| CVE-2023-21837 | Oracle WebLogic Server 安全漏洞 — WebLogic Server | 7.5 | High | 2023-01-17 |
| CVE-2023-21838 | Oracle WebLogic Server 安全漏洞 — WebLogic Server | 7.5 | High | 2023-01-17 |
| CVE-2023-21831 | Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 — PeopleSoft Enterprise CS Academic Advisement | 5.3 | Medium | 2023-01-17 |
| CVE-2023-21830 | Oracle Java SE 安全漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2023-01-17 |
| CVE-2023-21825 | Oracle E-Business Suite 安全漏洞 — iSupplier Portal | 5.3 | Medium | 2023-01-17 |
| CVE-2022-3091 | RONDS EPM 信息泄露漏洞 — Equipment Predictive Maintenance Solution CWE-200 | 7.5 | High | 2023-01-17 |
| CVE-2022-45439 | Zyxel AX7501-B0 安全漏洞 — AX7501-B0 firmware CWE-312 | 6.5 | Medium | 2023-01-17 |
| CVE-2023-0122 | Linux kernel 代码问题漏洞 — Kernel CWE-476 | 7.5 | - | 2023-01-17 |
| CVE-2023-22278 | Digital Arts m-FILTER 安全漏洞 — m-FILTER Ver.5 Series and Ver.4 Series | 5.3 | - | 2023-01-17 |
| CVE-2023-22279 | MAHO-PBX NetDevancer series 操作系统命令注入漏洞 — MAHO-PBX NetDevancer series | 9.8 | - | 2023-01-17 |
| CVE-2023-22286 | MAHO-PBX NetDevancer series 跨站请求伪造漏洞 — MAHO-PBX NetDevancer series | 8.1 | - | 2023-01-17 |
| CVE-2023-22296 | MAHO-PBX NetDevancer series 跨站脚本漏洞 — MAHO-PBX NetDevancer series | 6.1 | - | 2023-01-17 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24643 条 CVE 漏洞。