CWE-839

3 active CVEs classified under this weakness category. Sourced from NVD, GHSA, and vendor advisories. Full definition on MITRE →

CVEs classified under CWE-839page 1 of 1

CVE-2019-20925HIGHCVSS 7.5EG 7.5
2020-11-24
An unauthenticated client can trigger denial of service by issuing specially crafted wire protocol messages, which cause the message decompressor to incorrectly allocate memory. This issue affects MongoDB Server v4.2 versions prior to 4.2.…
CVE-2023-0425HIGHCVSS 8.6EG 8.6
2023-08-07
ABB is aware of vulnerabilities in the product versions listed below. An update is available that resolves the reported vulnerabilities in the product versions under maintenance. An attacker who successfully exploited one or more of these…
CVE-2023-22854HIGHCVSS 7.5EG 7.5
2023-02-13
The ccmweb component of Mitel MiContact Center Business server 9.2.2.0 through 9.4.1.0 could allow an unauthenticated attacker to download arbitrary files, due to insufficient restriction of URL parameters. A successful exploit could allow…

Map vulnerabilities like CWE-839 to your infrastructure

EchelonGraph correlates every CVE — across CWE-839 and 150+ other weakness categories — against the assets you actually run. See blast radius, fix versions, and remediation steps in one graph.

Start Free Scan →