CWE-1125 · Other weaknesses
Excessive Attack Surface
5CVEs
SortMost likely exploited
5 CVEs with CWE-1125 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-1715Account Takeover in neorazorx/facturascriptsneorazorx · neorazorx/facturascripts · CVSS 9.8 · 2022-05-13 | 9.8 | 1.4% | 2022-05-13 |
| CVE-2022-2037Excessive Attack Surface in tooljet/tooljettooljet · tooljet/tooljet · CVSS 9.8 · 2022-06-09 | 9.8 | 1.2% | 2022-06-09 |
| CVE-2023-0435Excessive Attack Surface in pyload/pyloadpyload · pyload/pyload · CVSS 4 · 2023-01-22 | 4.0 | 0.7% | 2023-01-22 |
| CVE-2024-5386Account Hijacking via Password Reset Token Leak in lunary-ai/lunarylunary-ai · lunary-ai/lunary · CVSS 9.6 · 2026-02-02 | 9.6 | 0.5% | 2026-02-02 |
| CVE-2023-49722Network port 8899 open in WiFi firmware of BCC101/BCC102/BCC50 products, that allows an attacker to connect to the device via same WiFi network.Bosch · BCC101 · CVSS 8.3 · 2024-01-09 | 8.3 | 0.4% | 2024-01-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.