What CVEs are caused by CWE-799?

52 recorded CVEs are attributed to CWE-799, including CVE-2025-54321, CVE-2023-40332, CVE-2024-48942.

What are the consequences of CWE-799?

Exploiting CWE-799 can lead to: DoS: Resource Consumption (Other), Bypass Protection Mechanism, Other.

Is CWE-799 actively exploited?

52 recorded CVEs are caused by CWE-799; none are currently in CISA's KEV catalog of actively exploited flaws.

Class weakness

Incomplete

CWE-799: Improper Control of Interaction Frequency

Also known as: Insufficient anti-automation, Brute force

The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.

Last updated May 1, 2026

Recorded CVEs

With this primary weakness

KEVs

In the CISA KEV catalog

Not rated

Likelihood of exploit

Per MITRE

Class

Abstraction

MITRE classification

Overview

This can allow the actor to perform actions more frequently than expected. The actor could be a human or an automated process such as a virus or bot. This could be used to cause a denial of service, compromise program logic (such as limiting humans to a single vote), or other consequences. For example, an authentication routine might not limit the number of times an attacker can guess a password. Or, a web site might conduct a poll but only expect humans to vote a maximum of once a day.

Real-world CVEs

52 recorded CVEs are caused by CWE-799 (Improper Control of Interaction Frequency). The highest-severity and most recent are shown first. 12 new CWE-799 CVEs have been recorded so far in 2026 (13 in 2025).

Showing 12 of 52 recorded CWE-799 CVEs. Track new ones as they are published and get AI-written analysis and fixes.

Monitor CWE-799 vulnerabilities

Common consequences

What can happen when CWE-799 is exploited.

DoS: Resource Consumption (Other), Bypass Protection Mechanism, Other

Affects: Availability, Access Control, Other

How it happens

When it is introduced

Typically introduced during these phases of the software lifecycle.

Architecture and Design

Implementation

Operation

Applies to

Technologies

Web Based

Web Server

Code examples

Illustrative examples from MITRE showing how the weakness appears in code.

In the following code a username and password is read from a socket and an attempt is made to authenticate the username and password. The code will continuously checked the socket for a username and password until it has been authenticated.

Vulnerable example

char username[USERNAME_SIZE];

Safe example

int count = 0;

This code does not place any restriction on the number of authentication attempts made. There should be a limit on the number of authentication attempts made to prevent brute force attacks as in the following example code.

Illustrative examples

Real CVEs that MITRE cites as examples of this weakness.

CVE-2024-50653 — Chain: e-commerce product has a "front-end restriction" for coupon use (CWE-602), but the server does not restrict the number of requests for the same coupon (CWE-799)
CVE-2002-1876 — Mail server allows attackers to prevent other users from accessing mail by sending large number of rapid requests.

Terminology & mappings

Alternate terms

Insufficient anti-automation: The term "insufficient anti-automation" focuses primarly on non-human actors such as viruses or bots, but the scope of this CWE entry is broader.
Brute force: Vulnerabilities that can be targeted using brute force attacks are often symptomatic of this weakness.

Mapped taxonomies

WASC: Insufficient Anti-Automation (21)

Frequently asked questions

Common questions about CWE-799.

What is CWE-799?: The product does not properly limit the number or frequency of interactions that it has with an actor, such as the number of incoming requests.
What CVEs are caused by CWE-799?: 52 recorded CVEs are attributed to CWE-799, including CVE-2025-54321, CVE-2023-40332, CVE-2024-48942.
What are the consequences of CWE-799?: Exploiting CWE-799 can lead to: DoS: Resource Consumption (Other), Bypass Protection Mechanism, Other.
Is CWE-799 actively exploited?: 52 recorded CVEs are caused by CWE-799; none are currently in CISA's KEV catalog of actively exploited flaws.

References

Weakness data is sourced from the MITRE CWE catalog (v4.20). CVE associations are aggregated and kept current by RadicalNotion.AI.

Stay ahead of CWE-799

Get alerted the moment a new CWE-799 vulnerability affects your stack, with AI-written analysis, severity context, and remediation guidance.

Start free See pricing