CWE-229 - Improper Handling of Values

Home/CWEs/CWE info/

CWE-229

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: Improper Handling of Values

Description: The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.

Common Consequences: Scope: Integrity
Impact: Unexpected State

Related Weaknesses: CWE-228Improper Handling of Syntactically Invalid Structure

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Latest Security News

Five lesser known Task Manager features in Windows 11

Ruijie Networks' Cloud Platform Flaws Could Expose 50,000 Devices to Remote Attacks

Critical SQL Injection Vulnerability in Apache Traffic Control Rated 9.9 CVSS — Patch Now

Iran's Charming Kitten Deploys BellaCPP: A New C++ Variant of BellaCiao Malware

New botnet exploits vulnerabilities in NVRs, TP-Link routers

Too Much 'Trust,' Not Enough 'Verify'

FBI links North Korean hackers to $308 million crypto heist

Trump 2.0 Portends Big Shift in Cybersecurity Policies

Common Alerts

HighExternal Redirect

InformationalSec-Fetch-Mode Header Has an Invalid Value

InformationalInformation Disclosure - Suspicious Comments in XML via WebSocket

InformationalModern Web Application

HighPath Traversal

InformationalStrict-Transport-Security Header on Plain HTTP Response

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

LowStrict-Transport-Security Malformed Content (Non-compliant with Spec)

HighExternal Redirect

HighText4shell (CVE-2022-42889)

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Common CWEs

CWE-1259 Improper Restriction of Security Token Assignment

CWE-345 Insufficient Verification of Data Authenticity

CWE-555 J2EE Misconfiguration: Plaintext Password in Configuration File

CWE-1174 ASP.NET Misconfiguration: Improper Model Validation

CWE-656 Reliance on Security Through Obscurity

CWE-430 Deployment of Wrong Handler

CWE-1423 Exposure of Sensitive Information caused by Shared Microarchitectural Predictor State that Influences Transient Execution

CWE-1261 Improper Handling of Single Event Upsets

CWE-1236 Improper Neutralization of Formula Elements in a CSV File

CWE-450 Multiple Interpretations of UI Input

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-229 - Improper Handling of Values

The product does not properly handle when the expected number of values for parameters, fields, or arguments is not provided in input, or if those values are undefined.