CWE-767 · Access Control
Access to Critical Private Variable via Public Method
4CVEs
SortMost likely exploited
4 CVEs with CWE-767 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2016-8380The web server in Phoenix Contact ILC PLCs allows access to read and write PLC variables without authentication.Phoenix Contact · Phoenix Contact ILC PLCs · 2018-04-05 | – | 11% | 2018-04-05 |
| CVE-2020-26868ARC Informatique PcVue Access to Critical Private Variable via Public MethodARC Informatique · PcVue · CVSS 7.5 · 2020-10-12 | 7.5 | 2.2% | 2020-10-12 |
| CVE-2024-36463The implementation of atob in "Zabbix JS" allows to create a string with arbitrary content and use it to access internal properties of objects.Zabbix · Zabbix · CVSS 6.5 · 2024-11-26 | 6.5 | 0.8% | 2024-11-26 |
| CVE-2024-34162The web interface of the affected devices is designed to hide the LDAP credentials even for administrative users. But configuring LDAP authentication to "SIMPLE", the device commu…Sharp Corporation · Multiple MFPs (multifunction printers) · CVSS 5.3 · 2024-11-26 | 5.3 | 0.8% | 2024-11-26 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.