CWE-297 Improper Validation of Certificate with Host Mismatch
variantThe product communicates with a host that provides a certificate, but the product does not properly ensure that the certificate is actually associated with that host.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (122)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-10936US | high8.1 | Exploit | ||
A weakness was found in postgresql-jdbc before version 42.2.5. It was possible to provide an SSL Factory and not check the host name if a host name verifier was not provided to the… | ||||
| CVE-2026-22747US | high8.1 | Exploit | ||
Vulnerability in Spring Spring Security. SubjectX500PrincipalExtractor does not correctly handle certain malformed X.509 certificate CN values, which can lead to reading the wrong… | ||||
| CVE-2024-32868US | high8.1 | Exploit | ||
ZITADEL provides users the possibility to use Time-based One-Time-Password (TOTP) and One-Time-Password (OTP) through SMS and Email. While ZITADEL already gives administrators the… | ||||
| CVE-2020-1887US | critical9.1 | — | ||
Incorrect validation of the TLS SNI hostname in osquery versions after 2.9.0 and before 4.2.0 could allow an attacker to MITM osquery traffic in the absence of a configured root ch… | ||||
| CVE-2026-48144US | critical9.1 | — | ||
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift c_glib bindings.
This issue affects Apache Thrift: before 0.24.0.
Users are recommended to up… | ||||
| CVE-2021-33695US | critical9.1 | — | ||
Potentially, SAP Cloud Connector, version - 2.0 communication with the backend is accepted without sufficient validation of the certificate. | ||||
| CVE-2026-35563US | high8.5 | — | ||
It was identified that the LDAP client implementation in version 2.1.7 does not verify if the server certificate matches the intended LDAP
hostname. While the underlying code vali… | ||||
| CVE-2024-49782US | high8.2 | — | ||
IBM OpenPages with Watson 8.3 and 9.0
could allow a remote attacker to spoof mail server identity when using SSL/TLS security. An attacker could exploit this vulnerability to g… | ||||
| CVE-2026-42790US | high8.1 | — | ||
Improper Certificate Validation vulnerability in Erlang OTP public_key (pubkey_cert and public_key modules) allows a DNS nameConstraints bypass via subject CommonName fallback in T… | ||||
| CVE-2023-34143US | high8.1 | — | ||
Improper Validation of Certificate with Host Mismatch vulnerability in Hitachi Device Manager on Windows, Linux (Device Manager Server, Device Manager Agent, Host Data Collector co… | ||||
| CVE-2022-41244US | high8.1 | — | ||
Jenkins View26 Test-Reporting Plugin 1.0.7 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-… | ||||
| CVE-2022-41243US | high8.1 | — | ||
Jenkins SmallTest Plugin 1.0.4 and earlier does not perform hostname validation when connecting to the configured View26 server that could be abused using a man-in-the-middle attac… | ||||
| CVE-2022-32153US | high8.1 | — | ||
Splunk Enterprise peers in Splunk Enterprise versions before 9.0 and Splunk Cloud Platform versions before 8.2.2203 did not validate the TLS certificates during Splunk-to-Splunk co… | ||||
| CVE-2020-11050US | high8.1 | — | ||
In Java-WebSocket less than or equal to 1.4.1, there is an Improper Validation of Certificate with Host Mismatch where WebSocketClient does not perform SSL hostname validation. Thi… | ||||
| CVE-2022-22787US | high7.5 | — | ||
The Zoom Client for Meetings (for Android, iOS, Linux, macOS, and Windows) before version 5.10.0 fails to properly validate the hostname during a server switch request. This issue… | ||||
| CVE-2021-44549US | high7.4 | — | ||
Apache Sling Commons Messaging Mail provides a simple layer on top of JavaMail/Jakarta Mail for OSGi to send mails via SMTPS. To reduce the risk of "man in the middle" attacks addi… | ||||
| CVE-2019-13050US | high7.5 | — | ||
Interaction between the sks-keyserver code through 1.2.0 of the SKS keyserver network, and GnuPG through 2.2.16, makes it risky to have a GnuPG keyserver configuration line referri… | ||||
| CVE-2026-62243US | high7.5 | — | ||
Netty (io.netty:netty-handler) versions from 4.2.0.Final through 4.2.16.Final and versions through 4.1.136.Final disable TLS hostname verification on the SslProvider.OPENSSL client… | ||||
| CVE-2026-48145US | high7.5 | — | ||
Improper Validation of Certificate with Host Mismatch vulnerability in Apache Thrift C++ bindings.
This issue affects Apache Thrift: before 0.24.0.
Users are recommended to upgra… | ||||
| CVE-2026-54275US | high7.5 | — | ||
AIOHTTP is an asynchronous HTTP client/server framework for asyncio and Python. Prior to 3.14.1, the server_hostname TLS SNI check can be bypassed when an existing connection is re… | ||||
03
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan