access:pre-auth 类型相关 24612 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2021-37593 | Advisto PEEL SHOPPING SQL注入漏洞 — n/a | 9.1 | - | 2021-07-27 |
| CVE-2020-16839 | 多款 Crestron 设备授权问题漏洞 — n/a | 7.5 | - | 2021-07-27 |
| CVE-2021-36004 | Adobe InDesign 缓冲区错误漏洞 — InDesign CWE-787 | 8.8 | High | 2021-07-27 |
| CVE-2020-7388 | Sage Group Sage X3 安全漏洞 — X3 CWE-290 | 10.0 | Critical | 2021-07-22 |
| CVE-2021-33032 | EQ-3 eQ-3 HomeMatic CCU2 和 CCU3 操作系统命令注入漏洞 — n/a | 9.8 | - | 2021-07-22 |
| CVE-2021-35464 | ForgeRock AM 代码问题漏洞 — n/a | 9.8 | - | 2021-07-22 |
| CVE-2021-33478 | Broadcom Media exChange 缓冲区错误漏洞 — n/a | 6.8 | - | 2021-07-22 |
| CVE-2021-1600 | Cisco Intersight 安全漏洞 — Cisco Intersight Virtual Appliance CWE-284 | 8.3 | High | 2021-07-22 |
| CVE-2021-1601 | Cisco Intersight 安全漏洞 — Cisco Intersight Virtual Appliance CWE-284 | 8.3 | High | 2021-07-22 |
| CVE-2021-1614 | Cisco SD-WAN vManage Software 安全漏洞 — Cisco SD-WAN Solution CWE-126 | 5.3 | Medium | 2021-07-22 |
| CVE-2021-20596 | MELSEC-F FX3U-ENET代码问题漏洞 — MELSEC-F Series FX3U-ENET; FX3U-ENET-L; FX3U-ENET-P502 | 7.5 | - | 2021-07-22 |
| CVE-2021-32744 | Collabora Online 安全漏洞 — online CWE-639 | 9.8 | Critical | 2021-07-21 |
| CVE-2020-21936 | Motorola CX2 访问控制错误漏洞 — n/a | 5.3 | - | 2021-07-21 |
| CVE-2021-22146 | Elasticsearch 安全漏洞 — n/a | 5.3 | - | 2021-07-21 |
| CVE-2021-2463 | Oracle Commerce 输入验证错误漏洞 — Commerce Platform | 9.8 | Critical | 2021-07-20 |
| CVE-2021-2462 | Oracle Commerce 输入验证错误漏洞 — Commerce Service Center | 6.1 | Medium | 2021-07-20 |
| CVE-2021-2457 | Oracle Fusion Middleware安全漏洞 — Identity Manager | 5.3 | Medium | 2021-07-20 |
| CVE-2021-2456 | Oracle Fusion Middleware安全漏洞 — Business Intelligence Enterprise Edition | 9.8 | Critical | 2021-07-20 |
| CVE-2021-2453 | Oracle Fusion Middleware 安全漏洞 — Outside In Technology | 7.5 | High | 2021-07-20 |
| CVE-2021-2452 | Oracle Fusion Middleware 安全漏洞 — Outside In Technology | 7.5 | High | 2021-07-20 |
| CVE-2021-2451 | Oracle Fusion Middleware 安全漏洞 — Outside In Technology | 7.5 | High | 2021-07-20 |
| CVE-2021-2450 | Oracle Fusion Middleware 安全漏洞 — Outside In Technology | 7.5 | High | 2021-07-20 |
| CVE-2021-2449 | Oracle Fusion Middleware 安全漏洞 — Outside In Technology | 7.5 | High | 2021-07-20 |
| CVE-2021-2446 | Oracle Secure Global Desktop输入验证错误漏洞 — Secure Global Desktop | 9.6 | Critical | 2021-07-20 |
| CVE-2021-2439 | Oracle Hyperion 输入验证错误漏洞 — Hyperion BI+ | 4.3 | Medium | 2021-07-20 |
| CVE-2021-2436 | Oracle E-Business Suite 输入验证错误漏洞 — Common Applications | 8.2 | High | 2021-07-20 |
| CVE-2021-2435 | Oracle Essbase 输入验证错误漏洞 — Hyperion Analytic Provider Services | 8.1 | High | 2021-07-20 |
| CVE-2021-2433 | Oracle Essbase 输入验证错误漏洞 — Hyperion Analytic Provider Services | 7.5 | High | 2021-07-20 |
| CVE-2021-2432 | Oracle Java SE 输入验证错误漏洞 — Java SE JDK and JRE | 3.7 | Low | 2021-07-20 |
| CVE-2021-2431 | Oracle Fusion Middleware 安全漏洞 — Outside In Technology | 7.5 | High | 2021-07-20 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 24612 条 CVE 漏洞。