CWE-1270 · Other weaknesses
Generation of Incorrect Security Tokens
8CVEs
SortMost likely exploited
8 CVEs with CWE-1270 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-2882Privilege Escalation in CBOT's ChatbotCBOT · Chatbot · CVSS 9.8 · 2023-05-25 | 9.8 | 0.6% | 2023-05-25 |
| CVE-2023-32188JWT token compromise can allow malicious actions including Remote Code Execution (RCE)SUSE · neuvector · CVSS 9.4 · 2024-10-16 | 9.4 | 0.6% | 2024-10-16 |
| CVE-2023-22644JWT token compromise can allow malicious actions including Remote Code Execution (RCE)SUSE · neuvector · CVSS 9.4 · 2023-09-20 | 9.4 | 0.5% | 2023-09-20 |
| CVE-2023-30524Jenkins Report Portal Plugin 0.5 and earlier does not mask ReportPortal access tokens displayed on the configuration form, increasing the potential for attackers to observe and ca…Jenkins Project · Jenkins Report Portal Plugin · CVSS 4.3 · 2023-04-12 | 4.3 | 0.4% | 2023-04-12 |
| CVE-2026-49499Dell PowerProtect Data Manager, versions prior to 20.2.0.0, contain(s) a Generation of Incorrect Security Tokens vulnerability in the IAM. A low privileged attacker with remote ac…Dell · PowerProtect Data Manager · CVSS 8.8 · 2026-07-22 | 8.8 | 0.4% | 2026-07-22 |
| CVE-2025-59698Entrust nShield Connect XC, nShield 5c, and nShield HSMi through 13.6.11, or 13.7 (patched in 13.6.12 (LTS) and 13.9.0 (STS)), might allow a physically proximate attacker to gain…Entrust · Nshield 5c Firmware · CVSS 6.8 · 2025-12-02 | 6.8 | 0.4% | 2025-12-02 |
| CVE-2026-15831Generation of Incorrect Security Tokens in GitLabGitLab · GitLab · CVSS 4.3 · 2026-07-29 | 4.3 | 0.3% | 2026-07-29 |
| CVE-2026-19636Insuffucient Protections Lead to Brute ForceTenable, Inc. · Security Center · CVSS 5.3 · 2026-08-14 | 5.3 | 0.3% | 2026-08-14 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.