CWE-287: Improper Authentication
ClassDraftExploit Likelihood: High🏆 #12 in Top 25 (2024)
When an actor claims to have a given identity, the product does not prove or insufficiently proves that the claim is correct.
View on MITRE1,117Related CVEs
15.15Severity Score
Back to CWE Lookup
Technical Details
- Structure
- Simple
Applicable To
Not Language-Specific
🏆 CWE Top 25 Historical Ranking
2023:#13
Score: 6.39
1,042 CVEs
2024:#12↑1
Score: 15.15
1,117 CVEs
Trend:Worsening (moved down 1 ranks)
Learn More
Find Related CVEs
Search for vulnerabilities that exploit CWE-287
CWE Top 25 Most Dangerous
See how this weakness ranks against others
CVE vs CWE: What's the Difference?
Understanding vulnerabilities vs weaknesses
Understanding CVSS Scoring
How vulnerability severity is measured
View Full MITRE Entry
Complete technical details and references