CWE-449 - The UI Performs the Wrong Action

Home/CWEs/CWE info/

CWE-449

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: The UI Performs the Wrong Action

Description: The UI performs the wrong action with respect to the user's request.

Common Consequences: Scope: Other
Impact: Quality Degradation, Varies by Context

Related Weaknesses: CWE-446UI Discrepancy for Security Feature

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Recorded Future CEO applauds "undesirable" designation by Russia

CISA orders federal agencies to secure Microsoft 365 tenants

Google Chrome uses AI to analyze pages in new scam detection feature

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Microsoft fixes exploited zero-day (CVE-2024-49138)

Common Alerts

MediumCORS Misconfiguration

MediumX-ChromeLogger-Data (XCOLD) Header Information Leak

MediumSpring Actuator Information Leak

InformationalInformation Disclosure - Suspicious Comments in XML via WebSocket

MediumHTTP to HTTPS Insecure Transition in Form Post

MediumAuthentication Credentials Captured

HighRemote Code Execution - CVE-2012-1823

MediumInformation Disclosure - JWT in Browser localStorage

LowInformation Disclosure - Sensitive Information in Browser sessionStorage

HighSource Code Disclosure - /WEB-INF Folder

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2022-23227 NUUO NVRmini 2 Devices Missing Authentication Vulnerability

CVE-2021-40407 Reolink RLC-410W IP Camera OS Command Injection Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2024-43491 Microsoft Windows Update Use-After-Free Vulnerability

Top CWE List

CWE-581 Object Model Violation: Just One of Equals and Hashcode Defined

HighCWE-863 Incorrect Authorization

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

HighCWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')

CWE-1051 Initialization with Hard-Coded Network Resource Configuration Data

CWE-1395 Dependency on Vulnerable Third-Party Component

CWE-66 Improper Handling of File Names that Identify Virtual Resources

CWE-201 Insertion of Sensitive Information Into Sent Data

MediumCWE-352 Cross-Site Request Forgery (CSRF)

CWE-451 User Interface (UI) Misrepresentation of Critical Information

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-449 - The UI Performs the Wrong Action

The UI performs the wrong action with respect to the user's request.