Home/CWEs/CWE info/

CWE-448 - Obsolete Feature in UI

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Obsolete Feature in UI

Description: A UI function is obsolete and the product does not warn the user.

Common Consequences: Scope: Other
Impact: Quality Degradation, Varies by Context

Related Weaknesses: CWE-446UI Discrepancy for Security Feature

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Garmin GPS watches crashing, stuck in triangle 'reboot loop'

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Apple Patches Actively Exploited Zero-Day Affecting iPhones, Macs, and More

Zyxel CPE Devices Face Active Exploitation Due to Unpatched CVE-2024-40891 Vulnerability

5,000+ SonicWall firewalls still open to attack (CVE-2024-53704)

Lazarus Group Uses React-Based Admin Panel to Control Global Cyber Attacks

Broadcom Patches VMware Aria Flaws – Exploits May Lead to Credential Theft

Microsoft deprecates PPTP and L2TP VPN protocols in Windows Server

Common Alerts

InformationalBase64 Disclosure in WebSocket message

MediumCSP: style-src unsafe-hashes

InformationalStorable but Non-Cacheable Content

MediumCSP: Wildcard Directive

HighExpression Language Injection

InformationalCross Site Scripting (Persistent) - Prime

InformationalSplit Viewstate in Use

InformationalCSP: Header & Meta

HighSQL Injection - PostgreSQL

HighExternal Redirect

Latest CVE List

CVE-2025-24085 Apple Multiple Products Use-After-Free Vulnerability

CVE-2025-23006 SonicWall SMA1000 Appliances Deserialization Vulnerability

CVE-2020-11023 JQuery Cross-Site Scripting (XSS) Vulnerability

CVE-2024-50603 Aviatrix Controllers OS Command Injection Vulnerability

CVE-2024-55591 Fortinet FortiOS and FortiProxy Authentication Bypass Vulnerability

CVE-2025-21333 Microsoft Windows Hyper-V NT Kernel Integration VSP Heap-based Buffer Overflow Vulnerability

CVE-2025-21334 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2025-21335 Microsoft Windows Hyper-V NT Kernel Integration VSP Use-After-Free Vulnerability

CVE-2024-12686 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) OS Command Injection Vulnerability

CVE-2023-48365 Qlik Sense HTTP Tunneling Vulnerability

Common CWEs

CWE-1293 Missing Source Correlation of Multiple Independent Data

CWE-1125 Excessive Attack Surface

CWE-187 Partial String Comparison

CWE-704 Incorrect Type Conversion or Cast

CWE-15 External Control of System or Configuration Setting

CWE-940 Improper Verification of Source of a Communication Channel

CWE-1294 Insecure Security Identifier Mechanism

CWE-675 Multiple Operations on Resource in Single-Operation Context

CWE-13 ASP.NET Misconfiguration: Password in Configuration File

CWE-706 Use of Incorrectly-Resolved Name or Reference

Free online web security scanner

Don't show website scan report rating on the leaderboard

CWE-448 - Obsolete Feature in UI

A UI function is obsolete and the product does not warn the user.