CWE-90 관련 취약점
같은 약점 유형으로 분류된 취약점입니다. CWE 는 "무엇을 잘못했는가" 의 분류이고, 제품을 가리지 않고 같은 실수가 반복됩니다.
CWE-90 — 주요 취약점
악용이 확인된 것을 먼저 보여줍니다.
CVE-2026-46619Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, MSISDNValidation …0.6%심각9.3CVE-2026-55770OpenBao is an open source identity-based secrets management system. Prior to 2.5.5, OpenBao used Esc…0.4%보통6.8CVE-2026-109357LibreNMS before 26.9.0 contains an LDAP filter injection in ldap-authorization and ad-authorization …0.5%심각9.2CVE-2026-15723GitLab has remediated an issue in GitLab CE/EE affecting all versions from 10.1 before 19.3.6, 19.4 …0.4%높음8.2CVE-2026-89071Improper neutralization of special elements used in an LDAP query ('LDAP injection') vulnerability i…0.4%높음7.5CVE-2026-49469GLPI is a free asset and IT management software package. From 0.70 until 10.0.26 and 11.0.8, an auth…0.4%보통4.6CVE-2026-41573Open Access Management (OpenAM) is an access management solution. Prior to 16.1.1, IdentityResourceV…0.4%높음7.1CVE-2026-94053Authentication bypass via LDAP injection in component sshd-ldap in Apache MINA SSHD versions 1.2.0 t…0.4%심각9.1
전체 목록
19건
CVE-2026-67223RabbitMQ is a messaging and streaming broker. The advisory establishes affected 3.13, 4.0, 4.1, 4.2, and 4.3 m…0.4%보통6.3
CVE-2026-110256Finsys Dockhand through 1.0.18 contains an LDAP injection vulnerability in the tryLdapAuth function in src/lib…0.3%보통6.3
CVE-2026-53658Fabric CA is a Certificate Authority for Hyperledger Fabric. Prior to 1.5.21, when fabric-ca is configured wit…0.3%보통6.3
CVE-2026-90979LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and role lookup by textually substit…0.3%미평가
CVE-2026-78579The Okta Access Gateway does not sanitize SAML assertion attribute values before interpolating them into LDAP …0.2%보통6.8
CVE-2026-93636An LDAP filter injection vulnerability in Zimbra Collaboration Suite (ZCS) allows an authenticated user to que…0.2%보통4.3
CVE-2025-71431Frappe before 14.99.2 and 15.x before 15.86.0 contains an LDAP injection vulnerability because certain endpoin…0.3%보통6.3
CVE-2026-10759A flaw in Portal for ArcGIS could allow LDAP injection through administrative functionality that constructs Ac…0.2%보통5.5
CVE-2026-93635LDAP filter injection in Zimbra Collaboration Suite 10.1.0 through 10.1.21 allows unauthenticated attackers to…0.2%보통5.3
CVE-2026-101145A vulnerability was identified in Eleveo Call Recording Software 9.7.0. This vulnerability affects unknown cod…0.2%낮음2.1
CVE-2026-80055Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application versions prior to 5.36.00.00,…0.2%보통4.4
이 원장은 전체 CVE 가 아닙니다. NVD 에는 30만 건이 넘습니다. 여기 있는 것은 ① 악용이 확인된 것 ② 최근 공개된 것 ③ 국산 SW 관련 ④ KISA 권고에 등장한 것입니다. 무엇을 담았는지 밝히지 않으면 "없다" 를 "안전하다" 로 읽게 됩니다.