CWE:

	Topic	Date	Author
Low	CMS Showcase 1.0 Cross Site Scripting	10.09.2017	Felipe "Renzi" Gabriel

---

CVEMAP Search Results

CVE

Details

Description

2024-09-18

CVE-2024-43188

Updating...

IBM Business Automation Workflow 22.0.2, 23.0.1, 23.0.2, and 24.0.0 could allow a privileged user to perform unauthorized activities due to improper client side validation.

2024-08-25

CVE-2024-42340

Updating...

CyberArk - CWE-602: Client-Side Enforcement of Server-Side Security

2024-07-09

CVE-2024-39870

Updating...

A vulnerability has been identified in SINEMA Remote Connect Server (All versions < V3.2 SP1). The affected applications can be configured to allow users to manage own users. A local authenticated user with this privilege could use this modify users outside of their own scope as well as to escalate privileges.

2024-06-03

CVE-2023-48789

Updating...

A client-side enforcement of server-side security in Fortinet FortiPortal version 6.0.0 through 6.0.14 allows attacker to improper access control via crafted HTTP requests.

2024-05-17

	CVE-2024-32512	Updating...	Client-Side Enforcement of Server-Side Security vulnerability in weForms allows Removing Important Client Functionality.This issue affects weForms: from n/a through 1.6.20.
	CVE-2024-32521	Updating...	Client-Side Enforcement of Server-Side Security vulnerability in Highfivery LLC Zero Spam allows Removing Important Client Functionality.This issue affects Zero Spam: from n/a through 5.5.6.
	CVE-2024-32685	Updating...	Client-Side Enforcement of Server-Side Security vulnerability in Wpmet Wp Ultimate Review allows Functionality Bypass.This issue affects Wp Ultimate Review: from n/a through 2.2.5.

2024-05-14

CVE-2024-31491

Updating...

A client-side enforcement of server-side security in Fortinet FortiSandbox version 4.4.0 through 4.4.4 and 4.2.0 through 4.2.6 allows attacker to execute unauthorized code or commands via HTTP requests.

2023-01-30

CVE-2023-0581

Updating...

The PrivateContent plugin for WordPress is vulnerable to protection mechanism bypass due to the use of client side validation in versions up to, and including, 8.4.3. This is due to the plugin checking if an IP had been blocklist via client-side scripts rather than server-side. This makes it possible for unauthenticated attackers to bypass any login restrictions that may prevent a brute force attack.

2022-09-06

CVE-2022-1525

Updating...

The Cognex 3D-A1000 Dimensioning System in firmware version 1.0.3 (3354) and prior is vulnerable to CWE-602: Client-Side Enforcement of Server-Side Security, which could allow attackers to bypass web access controls by inspecting and modifying the source code of password protected web elements.

 

---

Copyright 2025, cxsecurity.com