CWE-298 · Cryptography
Improper Validation of Certificate Expiration
7CVEs
SortMost likely exploited
7 CVEs with CWE-298 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-42446Pow Mnesia cache doesn't invalidate all expired keys on startuppow-auth · pow · CVSS 6.5 · 2023-09-18 | 6.5 | 0.5% | 2023-09-18 |
| CVE-2025-67109Improper verification of the time certificate in Eclipse Cyclone DDS before v0.10.5 allows attackers to bypass certificate checks and execute commands with System privileges.Eclipse · Cyclone Data Distribution Service · CVSS 10 · 2025-12-23 | 10.0 | 0.3% | 2025-12-23 |
| CVE-2025-67108eProsima Fast-DDS v3.3 was discovered to contain improper validation for ticket revocation, resulting in insecure communications and connections.Eprosima · Fast Dds · CVSS 10 · 2025-12-23 | 10.0 | 0.3% | 2025-12-23 |
| CVE-2024-1248Role Overwriting via Silent JIT Provisioning in Multiple WSO2 Products Enables Privilege EscalationWSO2 · WSO2 API Manager · CVSS 4.8 · 2026-07-04 | 4.8 | 0.3% | 2026-07-04 |
| CVE-2025-59036Infrahub allows authentication with deleted and expired API tokensopsmill · infrahub · CVSS 5.5 · 2025-09-09 | 5.5 | 0.2% | 2025-09-09 |
| CVE-2025-4384Certificate validity not properly verifiedarcinfo · PcVue · CVSS 6 · 2025-05-06 | 6.0 | 0.1% | 2025-05-06 |
| CVE-2025-61736iSTAR- Improper Validation of Certificate ExpirationJohnson Controls · iSTAReX, iSTAR Edge, iSTAR Ultra LT, iSTAR Ultra , iSTAR Ultra SE · CVSS 7.1 · 2025-12-17 | 7.1 | 0.1% | 2025-12-17 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.