Microsoft SharePoint Server Elevation of Privilege Vulnerability

Improper privilege management in Microsoft Office SharePoint allows an authorized attacker to elevate privileges locally...

SAP Gateway Client 安全漏洞

SAP Gateway Client is an OData service test and debugging tool from SAP Germany, integrated into SAP NetWeaver Gateway. An information disclosure vulnerability exists in SAP Gateway Client that stems from improper privilege management and can be exploited by an attacker to cause information...

PT-2025-20978 · Microsoft · Sharepoint Server

Name of the Vulnerable Software and Affected Versions: Microsoft Office SharePoint affected versions not specified Description: The issue concerns improper privilege management, allowing an authorized attacker to elevate privileges locally. This could potentially affect the system. Recommendation...

SAP S/4 HANA 安全漏洞

SAP S/4 HANA is an intelligent, integrated ERP software for large enterprises from SAP, a German company. A security vulnerability exists in SAP S/4 HANA that stems from improper privilege management and could lead to the disclosure of sensitive information...

PT-2025-20942 · Microsoft · Windows Secure Kernel Mode +1

Name of the Vulnerable Software and Affected Versions: Windows Secure Kernel Mode affected versions not specified Description: The issue is related to improper privilege management, allowing an authorized attacker to elevate privileges locally. This can affect the system, potentially leading to...

PT-2025-20842 · Centreon · Centreon Web

Name of the Vulnerable Software and Affected Versions: Centreon web versions 24.04.0 through 24.04.9 Centreon web versions 24.10.0 through 24.10.3 Description: The issue is related to Improper Privilege Management in the API Token creation form modules, allowing Privilege Escalation...

CVE-2025-46745 Improper Privilege Management

An authenticated user without user-management permissions could view other users account information...

CVE-2025-46745 Improper Privilege Management

An authenticated user without user-management permissions could view other users account information...

CVE-2025-46745

CVE-2025-46745 affects Schweitzer Engineering Laboratories (SEL) software/Blueframe OS family where an authenticated user with lower privileges can view other users’ account information due to an improper privilege management/root-cause issue. Reported impact is information disclosure (confidenti...

CVE-2025-46744

CVE-2025-46744 describes an authenticated administrator privilege‑escalation flaw: the attacker can modify the Created By username on a user account. Public references tie this to Schweitzer Engineering Laboratories (SEL) products (e.g., SEL‑5033 acSELerator RTAC software and related tools) and m...

CVE-2025-46744 Improper Privilege Management

An authenticated administrator could modify the Created By username for a user account...

CVE-2025-46744 Improper Privilege Management

An authenticated administrator could modify the Created By username for a user account...

CVE-2025-46741 Improper Privilege Management

A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred...

CVE-2025-46741

The provided connected sources identify a vulnerability in Blueframe where a suspended or recently logged-out user can continue to interact with the system until the time-out period expires. Affected product is Blueframe; no exact versions are specified in the materials. The root cause, affected ...

CVE-2025-46741 Improper Privilege Management

A suspended or recently logged-out user could continue to interact with Blueframe until the time-out period occurred...

Security Bulletin: Security vulnerability in Apache Kafka clients affects IBM Business Automation Workflow Case Event Emitters - CVE-2024-31141

Summary IBM Business Automation Workflow Case Event Emitters package a vulnerable version of Apache Kafka clients. Vulnerability Details CVEID:CVE-2024-31141 DESCRIPTION: Files or Directories Accessible to External Parties, Improper Privilege Management vulnerability in Apache Kafka Clients. Apac...

ZTE GoldenDB Access Control Error Vulnerability

ZTE GoldenDB is a financial-grade transactional distributed database from China's ZTE Corporation ZTE. It is used in finance, government and enterprise, telecom and other industries to provide highly available data services. An Access Control Error vulnerability exists in ZTE GoldenDB, which stem...

BeyondTrust Privilege Management For Windows Installed (Windows)

Binary data beyondtrustprivilegemanagementwininstalled.nbin...

PT-2025-28379 · Bluetooth · Bluetooth

Name of the Vulnerable Software and Affected Versions: Bluetooth versions prior to SMR Jul-2025 Release 1 Description: The issue concerns improper privilege management in Bluetooth, allowing local attackers to enable Bluetooth. This could potentially lead to unauthorized access or control. There ...

The vulnerability of the Red Shield VPN client, related to insecure management of privileges, allows a hacker to elevate their own privileges.

The vulnerability of the Red Shield VPN client client is related to insecure management of privileges. Exploiting this vulnerability could allow attackers to enhance their privileges...