Login Sign Up

CWE-285: CWE-285

303
Total CVEs
45
Critical
148
High
7.2
Avg CVSS

Yearly Trend

2026
25
2025
128
2024
69
2023
38
2022
11

Top Affected Vendors

1 Microsoft 16
2 Adobe 13
3 Apple 11
4 Atlassian 10
5 Rallly 7
6 Samsung 7
7 Cisco 6
8 Redhat 5
9 Fortinet 5
10 Linuxfoundation 4

All CWE-285 CVEs (303)

CVE-2025-12958
2.7

The Rankology SEO and Analytics Tool WordPress plugin has an authorization vulnerability that allows authenticated users with Editor-level permissions...

Jan 7, 2026
CVE-2025-59100
N/A

This vulnerability allows unauthenticated attackers to access sensitive SQLite database exports containing passwords, PINs, and encryption keys. The f...

Jan 26, 2026
CVE-2025-67603
N/A

CVE-2025-67603 is an improper authorization vulnerability in Foomuuri that allows arbitrary users to influence firewall configuration through D-Bus wi...

Jan 8, 2026

About CWE-285 (CWE-285)

Our database tracks 303 CVEs classified as CWE-285, with 45 rated critical and 148 rated high severity. The average CVSS score for CWE-285 vulnerabilities is 7.2.

External reference: View CWE-285 on MITRE CWE →

Monitor CWE-285 Vulnerabilities

Get alerted when new CWE-285 CVEs affect your infrastructure.

Start Monitoring Free