CWE-473
5 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 2 of them as exploited in the wild.
- 5Published CVEs5 of them scored
- 2Last 12 monthspublished in the last year
- 2Critical2 more rated high
- 2Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2023-36845
Junos OS: EX and SRX Series: A PHP vulnerability in J-Web allows an unauthenticated to control an important environment variable
Juniper Networks · Junos OS
ExploitedCritical9.8 - CVE-2023-36844
Junos OS: EX Series: A PHP vulnerability in J-Web allows an unauthenticated attacker to control important environment variables
Juniper Networks · Junos OS
ExploitedMedium5.3