CWE-299 Improper Check for Certificate Revocation
baseThe product does not check or incorrectly checks the revocation status of a certificate, which may cause it to use a certificate that has been compromised.
01
parent weaknesses
Broader classes this is a kind of.
02
child weaknesses
More specific entries beneath this one.
03
vulnerabilities (25)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2015-4748US | high7.6 | — | ||
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45; JRockit R28.3.6; and Java SE Embedded 7u75 and Embedded 8u33 allows remote attackers to affect confidentiality, in… | ||||
| CVE-2025-3085US | critical9.8 | — | ||
A MongoDB server under specific conditions running on Linux with TLS and CRL revocation status checking enabled, fails to check the revocation status of the intermediate certificat… | ||||
| CVE-2023-23690US | high7.0 | — | ||
Cloud Mobility for Dell EMC Storage, versions 1.3.0.X and below contains an Improper Check for Certificate Revocation vulnerability. A threat actor does not need any specific priv… | ||||
| CVE-2023-0430US | medium6.5 | — | ||
Certificate OCSP revocation status was not checked when verifying S/Mime signatures. Mail signed with a revoked certificate would be displayed as having a valid signature. Thunderb… | ||||
| CVE-2020-16228US | medium6.4 | — | ||
In Patient Information Center iX (PICiX) Versions C.02 and C.03,
PerformanceBridge Focal Point Version A.01, IntelliVue patient monitors
MX100, MX400-MX550, MX750, MX850, and Int… | ||||
| CVE-2026-93493US | medium5.9 | — | ||
A flaw was found in Netty's `netty-handler-ssl-ocsp` component. A remote attacker can exploit this vulnerability by providing an Online Certificate Status Protocol (OCSP) response… | ||||
| CVE-2026-94417US | medium5.3 | — | ||
When an application enables both OCSP and CRL revocation checking on one WOLFSSL_CTX or certificate manager, wolfSSL skips the CRL check for any peer certificate that carries no Au… | ||||
| CVE-2024-0853US | medium5.3 | — | ||
curl inadvertently kept the SSL session ID for connections in its cache even when the verify status (*OCSP stapling*) test failed. A subsequent transfer to
the same hostname could… | ||||
| CVE-2026-102221US | medium4.4 | — | ||
No cwe for this issue in Windows Secure Boot allows an authorized attacker to bypass a security feature locally. | ||||
| CVE-2026-93602US | medium4.4 | — | ||
rustls-webpki versions before 0.103.10 and 0.104.0-alpha.5 contain faulty CRL authority-matching logic that compares only the first distributionPoint against each CRL's IssuingDist… | ||||
| CVE-2025-36057US | medium4.6 | — | ||
IBM Cognos Analytics Mobile (iOS) 1.1.0 through 1.1.22
is vulnerable to authentication bypass by using the Local Authentication Framework library which is not needed as biometric… | ||||
| CVE-2020-1675US | medium4.3 | — | ||
When Security Assertion Markup Language (SAML) authentication is enabled, Juniper Networks Mist Cloud UI might incorrectly process invalid authentication certificates which could a… | ||||
| CVE-2026-86231US | low3.7 | — | ||
A security flaw has been discovered in mwiede jsch up to 2.28.5. Affected is the function getRevokedKeys of the file src/main/java/com/jcraft/jsch/KnownHosts.java. Performing a man… | ||||
| CVE-2026-115557US | — | — | ||
Python has added a denylist for known compromised certificates to the "ssl" module to ensure user safety even without certificate revocation configured. Known compromised certifica… | ||||
| CVE-2026-115570US | — | — | ||
Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS. Prior to 42.11.16, 43.8.1, 44.9.1, and 45.0.0-beta.6, Electron does not bloc… | ||||
| CVE-2026-73581US | — | — | ||
Improper Check for Certificate Revocation vulnerability in Apache Tomcat. Both the OpenSSL and OpenSSL-FFM TLS implementations ignore CRLs when certificate uses a keystore.
This… | ||||
| CVE-2026-61699US | — | — | ||
nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. Prior to version 0.7.1, revocation is the only in-band mechanism that isolates a compromised/offboarded host f… | ||||
| CVE-2026-56821US | — | — | ||
Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, the OcspServerCertificateValidator flags an out-of-date OCSP… | ||||
| CVE-2026-9636US | — | — | ||
A security issue exists within CompactLogix® 5380, ControlLogix® 5580, and EN4 communication modules related to CIP Security certificate revocation handling. The security issue ste… | ||||
| CVE-2026-6899US | — | — | ||
Check for certificate revocation only considers the first matching CRL and ignores other valid CRLs of the same CA in the CycloneCrypto cryptographic wrapper of S2OPC library. It m… | ||||
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan