CWE-450 - Multiple Interpretations of UI Input

Home/CWEs/CWE info/

CWE-450

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Multiple Interpretations of UI Input

Description: The UI has multiple interpretations of user input but does not prompt the user when it selects the less secure interpretation.

Common Consequences: Scope: Other
Impact: Varies by Context

Related Weaknesses: CWE-357Insufficient UI Warning of Dangerous Operations

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Latest Security News

Veeam plugs serious holes in Service Provider Console (CVE-2024-42448, CVE-2024-42449)

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

Korea arrests CEO for adding DDoS feature to satellite receivers

Russia sentences Hydra dark web market leader to life in prison

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

Top Alert List

MediumDirectory Browsing

MediumAbsence of Anti-CSRF Tokens

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

Content Security Policy (CSP) Header Not Set

LowServer Leaks Information via "X-Powered-By" HTTP Response Header Field(s)

InformationalModern Web Application

CSP

InformationalNon-Storable Content

LowCookie without SameSite Attribute

LowCross-Domain JavaScript Source File Inclusion

Top CVE List

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2009-1151 phpMyAdmin Remote Code Execution Vulnerability

CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

Top CWE List

CWE-15 External Control of System or Configuration Setting

HighCWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

CWE-1245 Improper Finite State Machines (FSMs) in Hardware Logic

CWE-1395 Dependency on Vulnerable Third-Party Component

HighCWE-200 Exposure of Sensitive Information to an Unauthorized Actor

CWE-614 Sensitive Cookie in HTTPS Session Without 'Secure' Attribute

CWE-1426 Improper Validation of Generative AI Output

MediumCWE-190 Integer Overflow or Wraparound

CWE-236 Improper Handling of Undefined Parameters

CWE-328 Use of Weak Hash

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-450 - Multiple Interpretations of UI Input

The UI has multiple interpretations of user input but does not prompt the user when it selects the less secure interpretation.