CWE-701 · weakness in Other weaknesses
CWE-701
12 CVEs
Every dot is a CVE; the named ones are the most at risk. Red is exploited in the wild.
Every one of the 12 is a mark on the map. Named now: 1 to 12, most at risk first.
- PAN-OS: Plaintext Disclosure of External System Integration Credentials
- Vulnerability of defects introduced in the design process in the Multi-Device Task Center. Successful exploitation of this vulnerability will cause the hopped app to bypass the ap…
- Unauthorized service access vulnerability in the DSoftBus module. Successful exploitation of this vulnerability will affect availability.
- Encryption bypass vulnerability in Maintenance mode. Successful exploitation of this vulnerability may affect service confidentiality.
- Vulnerability of incomplete verification information in the VPN service module Impact: Successful exploitation of this vulnerability may affect availability.
- Vulnerability of improper permission control in the Gallery module Impact: Successful exploitation of this vulnerability may affect availability.
- Vulnerability of signature verification in the iaware system being initialized later than the time when the system broadcasts are sent. Successful exploitation of this vulnerabili…
- Access permission verification vulnerability in the content sharing pop-up module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Memory request vulnerability in the memory management module Impact: Successful exploitation of this vulnerability may affect service confidentiality.
- Design defect vulnerability in Expedition mode. Impact: Successful exploitation of this vulnerability may affect availability.
- Permission control vulnerability in the print module. Impact: Successful exploitation of this vulnerability may affect integrity and confidentiality.
- Permission management vulnerability in the network management module. Impact: Successful exploitation of this vulnerability may affect service integrity.
exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it
Zoom in on the map and the dots under the middle of it are named where they are.
Data as of 2026-11-14. CVE List through 2026-11-14 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.