CWE-295
Improper Certificate Validation
The product does not validate, or incorrectly validates, a certificate.
We have discovered 818 live websites that are affected by CWE-295.
CVEs
- Count - 6
CWE References
Website Distribution by Country
Number of websites using CWE-295 United States | 165 websites |
 Germany | 187 websites |
 France | 46 websites |
 Japan | 44 websites |
 Switzerland | 37 websites |
 Italy | 33 websites |
 GB | 26 websites |
 Russia | 25 websites |
 China | 24 websites |
 Singapore | 24 websites |
Website Distribution by TLD
Number of websites using CWE-295| .com | 244 websites |
| .de | 122 websites |
| .org | 55 websites |
| .net | 42 websites |
| .ch | 34 websites |
| .it | 27 websites |
| .cz | 19 websites |
| .pl | 16 websites |
| .fr | 15 websites |
| .jp | 15 websites |
Newest CVEs
List of the most recent CVEs that are part of CWE-295| Discovered | CVE | Description | Websites |
|---|---|---|---|
| Aug, 2025 | CVE-2025-33142 | IBM WebSphere Application Server information disclosure | 6 |
| May, 2025 | CVE-2025-4575 | The x509 application adds trusted use instead of rejected use | 532 |
| Mar, 2025 | CVE-2021-25635 | Content Manipulation with Certificate Validation Attack | 117 |
| Aug, 2024 | CVE-2024-6472 | Ability to trust not validated macro signatures removed in high security mode | 51 |
| Jul, 2022 | CVE-2022-26305 | Execution of Untrusted Macros Due to Improper Certificate Validation | 103 |
| Jul, 2019 | CVE-2019-7615 | A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. Whe... | 9 |
The most widespread CVEs
List of the most common CVEs that are part of CWE-295| Discovered | CVE | Description | Websites |
|---|---|---|---|
| May, 2025 | CVE-2025-4575 | The x509 application adds trusted use instead of rejected use | 532 |
| Mar, 2025 | CVE-2021-25635 | Content Manipulation with Certificate Validation Attack | 117 |
| Jul, 2022 | CVE-2022-26305 | Execution of Untrusted Macros Due to Improper Certificate Validation | 103 |
| Aug, 2024 | CVE-2024-6472 | Ability to trust not validated macro signatures removed in high security mode | 51 |
| Jul, 2019 | CVE-2019-7615 | A TLS certificate validation flaw was found in Elastic APM agent for Ruby versions before 2.9.0. Whe... | 9 |
| Aug, 2025 | CVE-2025-33142 | IBM WebSphere Application Server information disclosure | 6 |
Websites affected by CWE-295
Top websites that are affected by CWE-295. Please click on the "Contact us" link to get more information.| Domain | Country | Rank | Contacts |
|---|---|---|---|
| *******.org |  Mexico | **,*** | |
| *****.org | United States | **,*** | |
| *******.edu | United States | **,*** | |
| ******.org | Japan | ***,*** | |
| ********.com |  Austria | ***,*** | |
| *****.org | Japan | ***,*** | |
| *******.net |  Philippines | ***,*** | |
| ***********.org | United States | ***,*** | |
| ******.**.jp | Japan | ***,*** | |
| *************.com | Germany | ***,*** |