CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

PT-2025-32362 · Ibm · Ibm Cloud Pak For Business Automation

Name of the Vulnerable Software and Affected Versions: IBM Cloud Pak for Business Automation versions 24.0.0 through 24.0.0 IF005 IBM Cloud Pak for Business Automation versions 24.0.1 through 24.0.1 IF002 Description: The software contains a flaw that may allow an authenticated user to view...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46387

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46387

CVE-2025-46387 describes an authorization bypass in Emby MediaBrowser (a media server) via a user-controlled key (CWE-639). The vulnerability is documented across multiple feeds (NVD/NVD-derived, CNVD, ENISA ENISA EUVD, CCTV-like references), consistently noting an authorization bypass mechanism ...

CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386

CVE-2025-46386 corresponds to a CWE-639 authorization bypass via a user-controlled key. Connected sources identify the affected software as Emby MediaBrowser (and related mentions), noting that the issue enables bypassing authentication through manipulation of a user-controlled key. The Red Hat/C...

PT-2025-32153 · Emby · Mediabrowser

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: This issue involves an authorization bypass through a user-controlled key. Recommendations: At the moment, there is no information about a newer version that...

PT-2025-32151 · Emby · Mediabrowser

Name of the Vulnerable Software and Affected Versions: The product name cannot be determined. affected versions not specified Description: This issue involves an authorization bypass through a user-controlled key. Recommendations: At the moment, there is no information about a newer version that...

CVE-2025-46387: Authorization Bypass Through User-Controlled Key

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-46386: Authorization Bypass Through User-Controlled Key

CWE-639 Authorization Bypass Through User-Controlled Key...

CVE-2025-52446

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-52448

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux validate-initial-sql api modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before...

CVE-2025-52448

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux validate-initial-sql api modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before...

CVE-2025-52446

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux tab-doc api modules allows Interface Manipulation data access to the production database cluster.This issue affects Tableau Server: before 2025.1.3, before 2024.2.12, before 2023.3.19...

CVE-2025-52447

Authorization Bypass Through User-Controlled Key vulnerability in Salesforce Tableau Server on Windows, Linux set-initial-sql tabdoc command modules allows Interface Manipulation data access to the production database cluster. This issue affects Tableau Server: before 2025.1.3, before 2024.2.12,...

CVE-2025-52448

Salesforce Tableau Server is vulnerable to an authorization bypass via a user-controlled key within the validate-initial-sql API modules. This vulnerability allows an attacker to perform interface manipulation , potentially gaining unauthorized access to the production database cluster. The issue...