CWE-448 - Obsolete Feature in UI

Home/CWEs/CWE info/

CWE-448

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Obsolete Feature in UI

Description: A UI function is obsolete and the product does not warn the user.

Common Consequences: Scope: Other
Impact: Quality Degradation, Varies by Context

Related Weaknesses: CWE-446UI Discrepancy for Security Feature

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Latest Security News

Chinese hackers target Linux with new WolfsBane malware

Over 2,000 Palo Alto firewalls hacked using recently patched bugs

Microsoft pulls WinAppSDK update breaking Windows 10 app uninstalls

CISA says BianLian ransomware now focuses only on data theft

Microsoft disrupts ONNX phishing-as-a-service infrastructure

Warning: Over 2,000 Palo Alto Networks Devices Hacked in Ongoing Attack Campaign

Chinese APT Gelsemium Targets Linux Systems with New WolfsBane Backdoor

US seizes PopeyeTools cybercrime marketplace, charges administrators

Top Alert List

InformationalModern Web Application

MediumDirectory Browsing

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

CSP

LowCross-Domain JavaScript Source File Inclusion

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

Latest CVE List

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2024-44309 Apple Multiple Products Cross-Site Scripting (XSS) Vulnerability

CVE-2024-21287 Oracle Agile Product Lifecycle Management (PLM) Incorrect Authorization Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2024-38813 VMware vCenter Server Privilege Escalation Vulnerability

CVE-2024-1212 Progress Kemp LoadMaster OS Command Injection Vulnerability

CVE-2024-0012 Palo Alto Networks PAN-OS Management Interface Authentication Bypass Vulnerability

CVE-2024-9474 Palo Alto Networks PAN-OS Management Interface OS Command Injection Vulnerability

CVE-2024-9463 Palo Alto Networks Expedition OS Command Injection Vulnerability

CVE-2024-9465 Palo Alto Networks Expedition SQL Injection Vulnerability

Common CWEs

CWE-109 Struts: Validator Turned Off

LowCWE-483 Incorrect Block Delimitation

LowCWE-768 Incorrect Short Circuit Evaluation

CWE-1098 Data Element containing Pointer Item without Proper Copy Control Element

MediumCWE-117 Improper Output Neutralization for Logs

CWE-394 Unexpected Status Code or Return Value

CWE-1300 Improper Protection of Physical Side Channels

CWE-1110 Incomplete Design Documentation

CWE-24 Path Traversal: '../filedir'

HighCWE-77 Improper Neutralization of Special Elements used in a Command ('Command Injection')

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-448 - Obsolete Feature in UI

A UI function is obsolete and the product does not warn the user.