CWE-357 - Insufficient UI Warning of Dangerous Operations

Home/CWEs/CWE info/

CWE-357

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Insufficient UI Warning of Dangerous Operations

Description: The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.

Common Consequences: Scope: Non-Repudiation
Impact: Hide Activities

Related Weaknesses: CWE-693Protection Mechanism Failure

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Hackers now use AppDomain Injection to drop CobaltStrike beacons

New Ymir Ransomware Exploits Memory for Stealthy Attacks; Targets Corporate Networks

Attackers are exploiting 2 zero-days in Palo Alto Networks firewalls (CVE-2024-0012, CVE-2024-9474)

Urgent: Critical WordPress Plugin Vulnerability Exposes Over 4 Million Sites

Privileged Accounts, Hidden Threats: Why Privileged Access Security Must Be a Top Priority

CWE top 25 most dangerous software weaknesses

PAN-OS Firewall Vulnerability Under Active Exploitation – IoCs Released

China-Backed Hackers Leverage SIGTRAN, GSM Protocols to Infiltrate Telecom Networks

Common Alerts

HighSQL Injection - MySQL

InformationalSec-Fetch-Dest Header is Missing

InformationalHTTP Parameter Pollution

MediumHTTP to HTTPS Insecure Transition in Form Post

LowInformation Disclosure - Debug Error Messages via WebSocket

InformationalCSP: Header & Meta

LowInsufficient Site Isolation Against Spectre Vulnerability

MediumVulnerable JS Library

HighCross-Domain Misconfiguration - Silverlight

LowX-Backend-Server Header Information Leak

Latest CVE List

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability

CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability

Common CWEs

CWE-328 Use of Weak Hash

CWE-151 Improper Neutralization of Comment Delimiters

CWE-130 Improper Handling of Length Parameter Inconsistency

CWE-1058 Invokable Control Element in Multi-Thread Context with non-Final Static Storable or Member Element

CWE-587 Assignment of a Fixed Address to a Pointer

MediumCWE-1004 Sensitive Cookie Without 'HttpOnly' Flag

CWE-833 Deadlock

CWE-32 Path Traversal: '...' (Triple Dot)

CWE-420 Unprotected Alternate Channel

CWE-81 Improper Neutralization of Script in an Error Message Web Page

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-357 - Insufficient UI Warning of Dangerous Operations

The user interface provides a warning to a user regarding dangerous or sensitive operations, but the warning is not noticeable enough to warrant attention.