CWE-650 · Input Validation and Logic
Trusting HTTP Permission Methods on the Server Side
14CVEs
SortMost likely exploited
14 CVEs with CWE-650 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-28787IBM Security Verify Access information disclosureIBM · Security Verify Access Container · CVSS 8.7 · 2024-04-04 | 8.7 | 0.8% | 2024-04-04 |
| CVE-2022-38115Insecure Methods VulnerabilitySolarWinds · SolarWinds SEM · CVSS 5.3 · 2022-11-23 | 5.3 | 0.7% | 2022-11-23 |
| CVE-2024-56339IBM WebSphere Application Server information disclosureIBM · WebSphere Application Server · CVSS 3.7 · 2025-08-07 | 3.7 | 0.5% | 2025-08-07 |
| CVE-2023-50327IBM PowerSC weak securityIBM · PowerSC · CVSS 5.3 · 2024-02-02 | 5.3 | 0.5% | 2024-02-02 |
| CVE-2026-15753zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server sidezhinianboke · xianyu-auto-reply · CVSS 5.4 · 2026-07-14 | 5.4 | 0.4% | 2026-07-14 |
| CVE-2026-16435IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM · WebSphere Application Server · CVSS 5.9 · 2026-09-14 | 5.9 | 0.4% | 2026-09-14 |
| CVE-2024-45098IBM Aspera Faspex bypass securityIBM · Aspera Faspex · CVSS 6.8 · 2024-09-05 | 6.8 | 0.4% | 2024-09-05 |
| CVE-2025-21120Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low privileged attacker wit…Dell · Avamar Server · CVSS 8.3 · 2025-08-04 | 8.3 | 0.3% | 2025-08-04 |
| CVE-2024-45097IBM Aspera Faspex bypass securityIBM · Aspera Faspex · CVSS 5.9 · 2024-09-05 | 5.9 | 0.3% | 2024-09-05 |
| CVE-2024-45282HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)SAP_SE · SAP S/4 HANA (Manage Bank Statements) · CVSS 4.3 · 2024-10-08 | 4.3 | 0.3% | 2024-10-08 |
| CVE-2026-11537IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilitiesIBM · WebSphere Application Server · CVSS 4.3 · 2026-09-18 | 4.3 | 0.3% | 2026-09-18 |
| CVE-2026-8860IBM Verify Directory is affected by multiple vulnerabilitiesIBM · Security Verify Directory · CVSS 6.5 · 2026-11-08 | 6.5 | 0.3% | 2026-11-08 |
| CVE-2025-1837Multiple vulnerabilities in IBM watsonx Orchestrate with watsonx Assistant CartridgeIBM · watsonx Orchestrate Cartridge for Cloud Pak for Data · CVSS 5.4 · 2026-11-08 | 5.4 | 0.2% | 2026-11-08 |
| CVE-2026-42543IRIS has a Cross-Site Request Forgery (CSRF) issuedfir-iris · iris-web · CVSS 4.3 · 2026-06-04 | 4.3 | 0.2% | 2026-06-04 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.