CWE-239 - Failure to Handle Incomplete Element

Home/CWEs/CWE info/

CWE-239

Abstraction:
Variant

Structure:
Simple

Status:
Draft

Weakness Name: Failure to Handle Incomplete Element

Description: The product does not properly handle when a particular element is not completely specified.

Common Consequences: Scope: Integrity, Other
Impact: Varies by Context, Unexpected State

Related Weaknesses

CWE-404Improper Resource Shutdown or ReleaseMedium

CWE-237Improper Handling of Structural Elements

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Latest Security News

North Korean Hackers Pull Off $308M Bitcoin Heist from Crypto Firm DMM Bitcoin

CISA Adds Acclaim USAHERDS Vulnerability to KEV Catalog Amid Active Exploitation

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Adobe warns of critical ColdFusion bug with PoC exploit code

Non-Human Identities Gain Momentum, Requires Both Management, Security

FTC orders Marriott and Starwood to implement strict data security

Premium WPLMS WordPress plugins address seven critical flaws

US court finds spyware maker NSO liable for WhatsApp hacks

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

LowCookie without SameSite Attribute

CSP

InformationalRe-examine Cache-control Directives

MediumMissing Anti-clickjacking Header

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

Latest CVE List

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2018-14933 NUUO NVRmini Devices OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-55956 Cleo Multiple Products Unauthenticated File Upload Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2024-35250 Microsoft Windows Kernel-Mode Driver Untrusted Pointer Dereference Vulnerability

CVE-2024-50623 Cleo Multiple Products Unrestricted File Upload Vulnerability

Top CWE List

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

HighCWE-863 Incorrect Authorization

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-66 Improper Handling of File Names that Identify Virtual Resources

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1426 Improper Validation of Generative AI Output

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-239 - Failure to Handle Incomplete Element

The product does not properly handle when a particular element is not completely specified.