access:pre-auth 类型相关 24622 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-35588 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 3.1 | Low | 2021-10-20 |
| CVE-2021-35586 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35583 | Oracle MySQL Server 输入验证错误漏洞 — MySQL Server | 7.5 | High | 2021-10-20 |
| CVE-2021-35581 | Oracle E-Business Suite和Oracle Applications Manager 安全漏洞 — Applications Manager | 4.7 | Medium | 2021-10-20 |
| CVE-2021-35580 | Oracle E-Business Suite和Oracle Applications Manager 安全漏洞 — Applications Manager | 6.1 | Medium | 2021-10-20 |
| CVE-2021-35578 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35574 | Oracle Outside In Technology 输入验证错误漏洞 — Outside In Technology | 7.5 | High | 2021-10-20 |
| CVE-2021-35573 | Oracle Fusion Middleware和Oracle Outside In Technology 输入验证错误漏洞 — Outside In Technology | 7.5 | High | 2021-10-20 |
| CVE-2021-35572 | Oracle Fusion Middleware和Oracle Outside In Technology 输入验证错误漏洞 — Outside In Technology | 7.5 | High | 2021-10-20 |
| CVE-2021-35568 | Oracle PeopleSoft 安全漏洞 — PeopleSoft Enterprise PT PeopleTools | 6.1 | Medium | 2021-10-20 |
| CVE-2021-35565 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35564 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35561 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35560 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 7.5 | High | 2021-10-20 |
| CVE-2021-35559 | Oracle GraalVM 输入验证错误漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35556 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35554 | Oracle E-Business Suite和Oracle Trade Management 安全漏洞 — Trade Management | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35552 | Oracle WebLogic Server 输入验证错误漏洞 — WebLogic Server | 5.3 | Medium | 2021-10-20 |
| CVE-2021-35550 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 5.9 | Medium | 2021-10-20 |
| CVE-2021-2480 | Oracle Fusion Middleware和Oracle HTTP Server 输入验证错误漏洞 — HTTP Server | 3.7 | Low | 2021-10-20 |
| CVE-2021-2477 | Oracle E-Business Suite和Oracle Applications Framework 安全漏洞 — Applications Framework | 5.3 | Medium | 2021-10-20 |
| CVE-2021-2476 | Oracle Transportation Management 安全漏洞 — Transportation Management | 5.3 | Medium | 2021-10-20 |
| CVE-2021-2461 | Oracle Communications 安全漏洞 — Communications Interactive Session Recorder | 8.3 | High | 2021-10-20 |
| CVE-2021-30302 | 多款Qualcomm产品授权问题漏洞 — Snapdragon Compute, Snapdragon Connectivity, Snapdragon Consumer Electronics Connectivity, Snapdragon Consumer IOT, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wired Infrastructure and Networking | 7.5 | High | 2021-10-20 |
| CVE-2021-31386 | Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-311 | 5.3 | Medium | 2021-10-19 |
| CVE-2021-31383 | Juniper Networks Junos OS和Junos OS Evolved 缓冲区错误漏洞 — Junos OS | 7.5 | High | 2021-10-19 |
| CVE-2021-31370 | Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-184 | 6.5 | Medium | 2021-10-19 |
| CVE-2021-31369 | Juniper Networks Junos OS 安全漏洞 — Junos OS CWE-770 | 5.3 | Medium | 2021-10-19 |
| CVE-2021-31368 | Juniper Networks Junos OS 资源管理错误漏洞 — Junos OS CWE-400 | 7.5 | High | 2021-10-19 |
| CVE-2021-31364 | Juniper Networks Junos OS 代码问题漏洞 — Junos OS CWE-754 | 5.9 | Medium | 2021-10-19 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24622 条 CVE 漏洞。