access:pre-auth 类型相关 26535 条 CVE 漏洞,含 AI 中文分析、CVSS、参考链接与 POC。
“access:pre-auth”标签标识了无需身份验证即可触发的漏洞,涵盖18971个CVE。此类漏洞之所以关键,是因为攻击者无需凭证即可直接利用,极大降低了攻击门槛并扩大了潜在受害面。典型场景包括远程代码执行、未授权数据访问及拒绝服务攻击,常见于配置错误的API接口、默认凭证服务或存在逻辑缺陷的认证前处理模块,对系统安全性构成直接且严重的威胁。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2017-12786 | NoviFlow NoviWare和NoviSwitch设备缓冲区错误漏洞 — n/a | 9.8 | - | 2017-08-22 |
| CVE-2017-12787 | NoviFlow NoviWare和NoviSwitch设备安全漏洞 — n/a | 9.8 | - | 2017-08-22 |
| CVE-2017-5187 | Micro Focus Enterprise Developer和Enterprise Server Directory Server 跨站请求伪造漏洞 — Micro Focus Enterprise Developer, Micro Focus Enterprise Server CWE-352 | 8.8 | - | 2017-08-21 |
| CVE-2017-7420 | Micro Focus Enterprise Developer和Enterprise Server ESMAC 权限许可和访问控制漏洞 — Micro Focus Enterprise Developer, Micro Focus Enterprise Server CWE-287 | 9.1 | - | 2017-08-21 |
| CVE-2017-7423 | Micro Focus Enterprise Developer和Enterprise Server 跨站请求伪造漏洞 — Micro Focus Enterprise Developer, Micro Focus Enterprise Server CWE-352 | 8.1 | - | 2017-08-21 |
| CVE-2017-6771 | Cisco Ultra Services Framework AutoVNF automation工具信息泄露漏洞 — Ultra Services Framework | 5.3 | - | 2017-08-17 |
| CVE-2017-6776 | Cisco Elastic Services Controller 跨站脚本漏洞 — Elastic Services Controller | 6.1 | - | 2017-08-17 |
| CVE-2017-6784 | Cisco RV340、RV345和RV345P Dual WAN Gigabit VPN Routers 信息泄露漏洞 — RV340, RV345, and RV345P Dual WAN Gigabit VPN Routers | 5.3 | - | 2017-08-17 |
| CVE-2017-6788 | Cisco AnyConnect Secure Mobility Client Software 跨站脚本漏洞 — AnyConnect WebLaunch | 6.1 | - | 2017-08-17 |
| CVE-2017-6790 | Cisco TelePresence Video Communication Server 安全漏洞 — TelePresence Video Communication Server (VCS) | 5.9 | - | 2017-08-17 |
| CVE-2017-10005 | Oracle FLEXCUBE Private Banking 安全漏洞 — FLEXCUBE Private Banking | 6.1 | - | 2017-08-08 |
| CVE-2017-10013 | Oracle Sun ZFS Storage Appliance Kit 安全漏洞 — Sun ZFS Storage Appliance Kit (AK) Software | 8.3 | - | 2017-08-08 |
| CVE-2017-10016 | Oracle Sun Systems Products Suite Sun ZFS Storage Appliance Kit 安全漏洞 — Sun ZFS Storage Appliance Kit (AK) Software | 7.5 | - | 2017-08-08 |
| CVE-2017-10017 | Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 — PeopleSoft Enterprise PT PeopleTools | 6.1 | - | 2017-08-08 |
| CVE-2017-10019 | Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 — PeopleSoft Enterprise PT PeopleTools | 6.1 | - | 2017-08-08 |
| CVE-2017-10021 | Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 — PeopleSoft Enterprise PT PeopleTools | 6.1 | - | 2017-08-08 |
| CVE-2017-10024 | Oracle BI Publisher 安全漏洞 — BI Publisher (formerly XML Publisher) | 8.2 | - | 2017-08-08 |
| CVE-2017-10025 | Oracle BI Publisher 安全漏洞 — BI Publisher (formerly XML Publisher) | 8.2 | - | 2017-08-08 |
| CVE-2017-10028 | Oracle BI Publisher 安全漏洞 — BI Publisher (formerly XML Publisher) | 8.2 | - | 2017-08-08 |
| CVE-2017-10029 | Oracle BI Publisher 安全漏洞 — BI Publisher (formerly XML Publisher) | 8.2 | - | 2017-08-08 |
| CVE-2017-10030 | Oracle BI Publisher 安全漏洞 — BI Publisher (formerly XML Publisher) | 8.2 | - | 2017-08-08 |
| CVE-2017-10031 | Oracle Communications Convergence 安全漏洞 — Communications Convergence | 7.2 | - | 2017-08-08 |
| CVE-2017-10035 | Oracle BI Publisher 安全漏洞 — BI Publisher (formerly XML Publisher) | 8.2 | - | 2017-08-08 |
| CVE-2017-10036 | Oracle Solaris 安全漏洞 — Solaris Operating System | 7.5 | - | 2017-08-08 |
| CVE-2017-10040 | Oracle WebCenter Content 安全漏洞 — WebCenter Content | 8.2 | - | 2017-08-08 |
| CVE-2017-10042 | Oracle Solaris 安全漏洞 — Solaris Operating System | 7.5 | - | 2017-08-08 |
| CVE-2017-10043 | Oracle BI Publisher 安全漏洞 — BI Publisher (formerly XML Publisher) | 8.2 | - | 2017-08-08 |
| CVE-2017-10045 | Oracle PeopleSoft Enterprise PeopleTools 安全漏洞 — PeopleSoft Enterprise PT PeopleTools | 5.3 | - | 2017-08-08 |
| CVE-2017-10047 | Oracle MICROS BellaVita 安全漏洞 — MICROS BellaVita | 6.5 | - | 2017-08-08 |
| CVE-2017-10048 | Oracle Enterprise Repository 安全漏洞 — Enterprise Repository | 6.1 | - | 2017-08-08 |
access:pre-auth 是常见的弱点类别,本平台收录该类弱点关联的 26535 条 CVE 漏洞。