--- title: "CWE-16: Configuration" url: https://radicalnotion.ai/cwe/cwe-16 type: cwe description: "Weaknesses in this category are typically introduced during the configuration of the software." updated: 2026-05-01 source: RadicalNotion.AI license: CC BY-NC 4.0 (https://creativecommons.org/licenses/by-nc/4.0/) --- # CWE-16: Configuration - **Status:** Obsolete - **CVEs with this as primary weakness:** 313 - **Of those, in CISA KEV:** 0 - **New in 2026:** 4 - **CWE catalog version:** 4.20 ## Description Weaknesses in this category are typically introduced during the configuration of the software. ## Real CVEs with this weakness (sample of 12 of 313) | CVE | Title | Severity | CVSS | EPSS | CISA KEV | Published | | --- | --- | --- | --- | --- | --- | --- | | CVE-2013-4316 | Code injection in Apache Struts | critical | 10.0 | - | No | 2013-09-30 | | CVE-2013-1221 | - | critical | 10.0 | - | No | 2013-05-09 | | CVE-2011-4501 | - | critical | 10.0 | - | No | 2011-11-22 | | CVE-2010-4586 | - | critical | 10.0 | - | No | 2010-12-22 | | CVE-2010-2977 | - | critical | 10.0 | - | No | 2010-08-09 | | CVE-2010-2276 | - | critical | 10.0 | - | No | 2010-06-14 | | CVE-2009-3956 | - | critical | 10.0 | - | No | 2010-01-13 | | CVE-2009-2357 | - | critical | 10.0 | - | No | 2009-07-07 | | CVE-2008-6820 | - | critical | 10.0 | - | No | 2009-06-03 | | CVE-2009-0621 | - | critical | 10.0 | - | No | 2009-02-26 | | CVE-2008-4212 | - | critical | 10.0 | - | No | 2008-10-10 | | CVE-2008-1662 | - | critical | 10.0 | - | No | 2008-08-01 | ## Frequently asked questions ### What is CWE-16? Weaknesses in this category are typically introduced during the configuration of the software. ### What CVEs are caused by CWE-16? 313 recorded CVEs are attributed to CWE-16, including CVE-2013-4316, CVE-2013-1221 and CVE-2011-4501. ### Is CWE-16 actively exploited? 313 recorded CVEs are caused by CWE-16; none are currently in CISA's KEV catalog of actively exploited flaws. Primary source: [MITRE CWE](https://cwe.mitre.org/data/definitions/16.html) --- Source: [RadicalNotion.AI](https://radicalnotion.ai/cwe/cwe-16). Licensed CC BY-NC 4.0; attribute RadicalNotion.AI and link the source page when you reuse this data.