The product does not have a mechanism in place for managing password aging.
Volume of CVEs assigned to CWE-262 and their average CVSS base score over time.
Top CVEs that have been assigned this CWE. A single CVE can have multiple CWE assignments, though many have just one.
6 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2026-50101HIGH Naxclow devices use a server-side, per-device relay credential that never rotates and is re-issued to the device on each boot. Because this credential remains valid indefinitely an | Jun 12, 2026 | 8.1 | 32 | NO | NO |
CVE-2022-22767HIGH Specific BD Pyxis™ products were installed with default credentials and may presently still operate with these credentials. There may be scenarios where BD Pyxis™ products are inst | Jun 2, 2022 | 8.8 | 26 | NO | NO |
CVE-2023-2022MEDIUM An issue has been discovered in GitLab CE/EE affecting all versions starting before 16.0.8, all versions starting from 16.1 before 16.1.3, all versions starting from 16.2 before 16 | Aug 2, 2023 | 4.3 | 23 | NO | NO |
CVE-2025-60010MEDIUM A password aging vulnerability in the RADIUS client of Juniper Networks Junos OS and Junos OS Evolved allows an authenticated, network-based attacker to access the device without e | Oct 9, 2025 | 5.4 | 19 | NO | NO |
CVE-2025-58435MEDIUM Open OnDemand is an open-source HPC portal. Prior to versions 3.1.15 and 4.0.7, noVNC interactive applications did not correctly rotate the password when TurboVNC was higher than v | Sep 9, 2025 | 4.1 | 17 | NO | NO |
CVE-2023-1555MEDIUM An issue has been discovered in GitLab affecting all versions starting from 15.2 before 16.1.5, all versions starting from 16.2 before 16.2.5, all versions starting from 16.3 befor | Sep 1, 2023 | 4.3 | 16 | NO | NO |
Exploit activity across CVEs assigned to this CWE, including CVEs that carry other CWE assignments.
Social posts that mention CVE IDs assigned to this CWE. This is assigned-CVE activity, not mentions of the CWE label itself.
Media articles that mention CVE IDs assigned to this CWE. This is assigned-CVE coverage, not mentions of the CWE label itself.