CWE-477 · Misconfiguration and Insecure Design
Use of Obsolete Function
15CVEs
SortMost likely exploited
15 CVEs with CWE-477 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2025-49213An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note…Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server · CVSS 9.8 · 2025-06-17 | 9.8 | 14% | 2025-06-17 |
| CVE-2025-49212An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note…Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server · CVSS 9.8 · 2025-06-17 | 9.8 | 14% | 2025-06-17 |
| CVE-2018-17890NUUO CMS all versions 3.1 and prior, The application uses insecure and outdated software components for functionality, which could allow arbitrary code execution.NUUO · NUUO CMS · 2018-10-12 | – | 3.3% | 2018-10-12 |
| CVE-2025-49220An insecure deserialization operation in Trend Micro Apex Central below version 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note t…Trend Micro, Inc. · Trend Micro Apex Central · CVSS 9.8 · 2025-06-17 | 9.8 | 2.2% | 2025-06-17 |
| CVE-2019-18251In Omron CX-Supervisor, Versions 3.5 (12) and prior, Omron CX-Supervisor ships with Teamviewer Version 5.0.8703 QS. This version of Teamviewer is vulnerable to an obsolete functio…Omron · Omron CX-Supervisor · 2019-11-25 | – | 1.7% | 2019-11-25 |
| CVE-2025-49219An insecure deserialization operation in Trend Micro Apex Central below versions 8.0.7007 could lead to a pre-authentication remote code execution on affected installations. Note…Trend Micro, Inc. · Trend Micro Apex Central · CVSS 9.8 · 2025-06-17 | 9.8 | 1.5% | 2025-06-17 |
| CVE-2025-49217An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a pre-authentication remote code execution on affected installations. Note…Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server · CVSS 9.8 · 2025-06-17 | 9.8 | 1.2% | 2025-06-17 |
| CVE-2025-49214An insecure deserialization operation in the Trend Micro Endpoint Encryption PolicyServer could lead to a post-authentication remote code execution on affected installations. Plea…Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server · CVSS 8.8 · 2025-06-17 | 8.8 | 0.9% | 2025-06-17 |
| CVE-2020-6978In Honeywell WIN-PAK 4.7.2, Web and prior versions, the affected product is vulnerable due to the usage of old jQuery libraries.Honeywell · Honeywell WIN-PAK 4.7.2, Web and prior versions · 2020-03-24 | – | 0.8% | 2020-03-24 |
| CVE-2022-1384Authorized users are allowed to install old plugin versions from the MarketplaceMattermost · Mattermost · CVSS 4.7 · 2022-04-19 | 4.7 | 0.7% | 2022-04-19 |
| CVE-2023-23451The Flexi Classic and Flexi Soft Gateways SICK UE410-EN3 FLEXI ETHERNET GATEW. with serial number <=2311xxxx all Firmware versions, SICK UE410-EN1 FLEXI ETHERNET GATEW. with seria…Sick · SICK FX0-GENT00000, SICK FX0-GENT00030, SICK FX0-GMOD00000, SICK FX0-GMOD00010,… · CVSS 9.8 · 2023-04-19 | 9.8 | 0.6% | 2023-04-19 |
| CVE-2025-49216An authentication bypass vulnerability in the Trend Micro Endpoint Encryption PolicyServer could allow an attacker to access key methods as an admin user and modify product config…Trend Micro, Inc. · Trend Micro Endpoint Encryption Policy Server · CVSS 9.8 · 2025-06-17 | 9.8 | 0.6% | 2025-06-17 |
| CVE-2019-10988In Philips HDI 4000 Ultrasound Systems, all versions running on old, unsupported operating systems such as Windows 2000, the HDI 4000 Ultrasound System is built on an old operatin…Philips · Philips HDI 4000 Ultrasound Systems · 2019-09-04 | – | 0.3% | 2019-09-04 |
| CVE-2019-10968Philips Holter 2010 Plus, all versions. A vulnerability has been identified that may allow system options that were not purchased to be enabled.Philips · Philips Holter 2010 Plus · 2019-07-24 | – | 0.3% | 2019-07-24 |
| CVE-2023-28829A vulnerability has been identified in SIMATIC NET PC Software V14 (All versions), SIMATIC NET PC Software V15 (All versions), SIMATIC PCS 7 V8.2 (All versions), SIMATIC PCS 7 V9.…Siemens · SIMATIC NET PC Software V14 · CVSS 3.9 · 2023-06-13 | 3.9 | 0.3% | 2023-06-13 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.