Variant weakness
Incomplete
CWE-792: Incomplete Filtering of One or More Instances of Special Elements
The product receives data from an upstream component, but does not completely filter one or more instances of special elements before sending it to a downstream component.
Last updated
3
Recorded CVEs
With this primary weakness
0
KEVs
In the CISA KEV catalog
Not rated
Likelihood of exploit
Per MITRE
Variant
Abstraction
MITRE classification
Overview
Incomplete filtering of this nature involves either: only filtering a single instance of a special element when more exist, or not filtering all instances or all elements where multiple special elements exist.
Real-world CVEs
3 recorded CVEs are caused by CWE-792 (Incomplete Filtering of One or More Instances of Special Elements). The highest-severity and most recent are shown first.
Common consequences
What can happen when CWE-792 is exploited.
Unexpected State