CWE-647
16 published CVEs are weaknesses of this kind, as the records or NVD name it; CISA lists 1 of them as exploited in the wild.
- 16Published CVEs16 of them scored
- 13Last 12 monthspublished in the last year
- 0Critical6 more rated high
- 1Known exploitedin CISA's KEV catalog
Known exploited
Newest addition to KEV first.
- CVE-2022-43939
Hitachi Vantara Pentaho Business Analytics Server - Use of Non-Canonical URL Paths for Authorization Decisions
Hitachi Vantara · Pentaho Business Analytics Server
ExploitedHigh8.6