CWE-650

CVEs per yearBy the year they were published

1. 20221
2. 20245
3. 20252
4. 20265

Newest CVEs

• CVE-2026-11537

  IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

  IBM · WebSphere Application Server

  Medium4.3
• CVE-2026-16435

  IBM WebSphere Application Server prior to 9.0.5.29 and 8.5.5.31 are affected by multiple vulnerabilities

  IBM · WebSphere Application Server

  Medium5.9
• CVE-2026-15753

  zhinianboke xianyu-auto-reply review approve trusting http permission methods on the server side

  zhinianboke · xianyu-auto-reply

  Medium5.3
• CVE-2026-42543

  IRIS has a Cross-Site Request Forgery (CSRF) issue

  dfir-iris · iris-web

  Medium4.3
• CVE-2026-44548

  ChurchCRM: CSRF via legacy GET-delete pages (FundRaiserDelete.php, PropertyTypeDelete.php, NoteDelete.php)

  ChurchCRM · CRM

  High8.1
• CVE-2024-56339

  IBM WebSphere Application Server information disclosure

  IBM · WebSphere Application Server

  Low3.7
• CVE-2025-21120

  Dell Avamar, versions prior to 19.10 SP1 with patch 338904, contains a Trusting HTTP Permission Methods on the Server-Side vulnerability in Security. A low…

  Dell · Avamar Server

  High8.3
• CVE-2024-45282

  HTTP Verb Tampering in SAP S/4 HANA(Manage Bank Statements)

  SAP_SE · SAP S/4 HANA (Manage Bank Statements)

  Medium4.3
• CVE-2024-45097

  IBM Aspera Faspex bypass security

  IBM · Aspera Faspex

  Medium5.9
• CVE-2024-45098

  IBM Aspera Faspex bypass security

  IBM · Aspera Faspex

  Medium6.8

Vendors it comes up for most

1. IBM7
2. ChurchCRM1
3. Dell1
4. SAP_SE1
5. SolarWinds1
6. dfir-iris1
7. zhinianboke1