CWE-693 保护机制失效 类弱点 293 条 CVE 漏洞汇总,含 AI 中文分析。
CWE-693指保护机制失效,属于安全控制缺陷。当应用缺失或错误配置防御手段时,攻击者可绕过安全限制,直接执行未授权操作或获取敏感数据。此类漏洞常因忽视特定攻击向量或机制实现不当引发。开发者需全面识别潜在威胁,确保启用并正确配置足够强度的防护机制,定期审查安全策略以消除盲区,从而有效抵御定向攻击。
| CVE ID | 标题 | CVSS | 风险等级 | Published |
|---|---|---|---|---|
| CVE-2023-34984 | Fortinet FortiWeb 安全漏洞 — FortiWeb | 7.1 | High | 2023-09-13 |
| CVE-2023-4039 | GCC 安全漏洞 — Arm GNU Toolchain | 4.8 | Medium | 2023-09-13 |
| CVE-2023-32493 | Dell PowerScale OneFS 安全漏洞 — PowerScale OneFS | 7.3 | High | 2023-08-16 |
| CVE-2023-3089 | Red Hat OpenShift Container Platform 安全漏洞 — openshift | 7.0 | High | 2023-07-05 |
| CVE-2023-30757 | Siemens TIA Portal 安全漏洞 — Totally Integrated Automation Portal (TIA Portal) V14 | 6.2 | Medium | 2023-06-13 |
| CVE-2023-30851 | Cilium 安全漏洞 — cilium | 2.6 | Low | 2023-05-25 |
| CVE-2023-0085 | WordPress Plugin Metform Elementor Contact Form Builder 安全漏洞 — MetForm – Contact Form, Survey, Quiz, & Custom Form Builder for Elementor | 5.3 | Medium | 2023-03-02 |
| CVE-2023-0002 | Palo Alto Networks Cortex XDR 安全漏洞 — Cortex XDR agent | 5.5 | Medium | 2023-02-08 |
| CVE-2022-32537 | Medtronic NGP 600 Series 安全漏洞 — Minimed 600 Series Insulin Pump | 4.8 | Medium | 2022-11-17 |
| CVE-2022-27516 | Citrix Gateway和Citrix ADC 安全漏洞 — Citrix Gateway, Citrix ADC | 5.3 | Medium | 2022-11-08 |
| CVE-2022-39266 | Marcel Laverdet isolated-vm 安全漏洞 — isolated-vm | 9.7 | Critical | 2022-09-29 |
| CVE-2022-39957 | OWASP ModSecurity Core Rule Set 安全漏洞 — ModSecurity Core Rule Set | 7.3 | High | 2022-09-20 |
| CVE-2022-36085 | Open Policy Agent 安全漏洞 — opa | 7.4 | High | 2022-09-08 |
| CVE-2022-35978 | Minetest 安全漏洞 — minetest | 7.7 | High | 2022-08-15 |
| CVE-2022-31479 | Carrier LenelS2 HID Mercury access panels 操作系统命令注入漏洞 — LNL-X2210 | 9.6 | Critical | 2022-06-06 |
| CVE-2022-20805 | Cisco Umbrella 加密问题漏洞 — Cisco Umbrella Insights Virtual Appliance | 4.1 | Medium | 2022-04-21 |
| CVE-2022-20738 | Cisco Umbrella 安全漏洞 — Cisco Umbrella Insights Virtual Appliance | 5.8 | Medium | 2022-02-10 |
| CVE-2022-22152 | Juniper Networks Contrail Service Orchestration 访问控制错误漏洞 — Contrail Service Orchestration | 7.7 | High | 2022-01-19 |
| CVE-2021-36310 | DELL Dell Networking OS10 资源管理错误漏洞 — Dell Networking OS10 | 4.9 | Medium | 2021-11-20 |
| CVE-2020-12954 | AMD Platform Security Processor 安全漏洞 — 1st Gen AMD EPYC™ | 5.5 | - | 2021-11-16 |
| CVE-2021-31362 | Juniper Networks Junos OS和Junos OS Evolved 安全漏洞 — Junos OS | 6.5 | Medium | 2021-10-19 |
| CVE-2021-1616 | Cisco IOS XE Software 安全漏洞 — Cisco IOS XE Software | 4.7 | Medium | 2021-09-23 |
| CVE-2021-32835 | Eclipse Keti 安全漏洞 — keti | 9.9 | - | 2021-09-09 |
| CVE-2021-3453 | 多款 Lenovo 设备 安全漏洞 — BIOS | 6.8 | Medium | 2021-07-16 |
| CVE-2021-32729 | Xwiki Platform 授权问题漏洞 — xwiki-platform | 2.0 | Low | 2021-07-01 |
| CVE-2021-1517 | Cisco Webex Meeting Center安全漏洞 — Cisco WebEx Meetings Server | 5.0 | Medium | 2021-06-04 |
| CVE-2021-27245 | TP-Link Archer A7 安全漏洞 — Archer A7 | 9.8 | - | 2021-03-29 |
| CVE-2021-1224 | 多款Cisco产品安全漏洞 — Cisco Firepower Threat Defense Software | 5.8 | Medium | 2021-01-13 |
| CVE-2021-1223 | 多款Cisco产品安全漏洞 — Cisco Firepower Threat Defense Software | 5.3 | - | 2021-01-13 |
| CVE-2020-28396 | 多款Siemens产品安全漏洞 — SICAM A8000 CP-8000 | 7.3 | - | 2020-12-14 |
CWE-693(保护机制失效) 是常见的弱点类别,本平台收录该类弱点关联的 293 条 CVE 漏洞。