CWE-448 - Obsolete Feature in UI

Home/CWEs/CWE info/

CWE-448

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Obsolete Feature in UI

Description: A UI function is obsolete and the product does not warn the user.

Common Consequences: Scope: Other
Impact: Quality Degradation, Varies by Context

Related Weaknesses: CWE-446UI Discrepancy for Security Feature

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

CISA orders federal agencies to secure Microsoft 365 tenants

Google Chrome uses AI to analyze pages in new scam detection feature

Recorded Future CEO applauds "undesirable" designation by Russia

Rspack npm Packages Compromised with Crypto Mining Malware in Supply Chain Attack

Lazarus Group Spotted Targeting Nuclear Engineers with CookiePlus Malware

Apache Tomcat Vulnerability CVE-2024-56337 Exposes Servers to RCE Attacks

Exploit released for critical WhatsUp Gold RCE flaw, patch now

Orgs Scramble to Fix Actively Exploited Bug in Apache Struts 2

Top Alert List

MediumAbsence of Anti-CSRF Tokens

Content Security Policy (CSP) Header Not Set

InformationalInformation Disclosure - Suspicious Comments

MediumMissing Anti-clickjacking Header

CSP

InformationalRe-examine Cache-control Directives

LowCookie without SameSite Attribute

InformationalModern Web Application

LowX-Content-Type-Options Header Missing

LowServer Leaks Version Information via "Server" HTTP Response Header Field

Top CVE List

CVE-2024-12356 BeyondTrust Privileged Remote Access (PRA) and Remote Support (RS) Command Injection Vulnerability

CVE-2024-20767 Adobe ColdFusion Improper Access Control Vulnerability

CVE-2021-44207 Acclaim Systems USAHERDS Use of Hard-Coded Credentials Vulnerability

CVE-2024-38812 VMware vCenter Server Heap-Based Buffer Overflow Vulnerability

CVE-2019-11001 Reolink Multiple IP Cameras OS Command Injection Vulnerability

CVE-2024-7593 Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability

CVE-2020-5849 Unraid Authentication Bypass Vulnerability

CVE-2024-43491 Microsoft Windows Update Use-After-Free Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2024-38094 Microsoft SharePoint Deserialization Vulnerability

Common CWEs

CWE-1113 Inappropriate Comment Style

CWE-793 Only Filtering One Instance of a Special Element

CWE-1259 Improper Restriction of Security Token Assignment

HighCWE-258 Empty Password in Configuration File

MediumCWE-128 Wrap-around Error

CWE-23 Relative Path Traversal

CWE-267 Privilege Defined With Unsafe Actions

HighCWE-327 Use of a Broken or Risky Cryptographic Algorithm

CWE-236 Improper Handling of Undefined Parameters

CWE-403 Exposure of File Descriptor to Unintended Control Sphere ('File Descriptor Leak')

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-448 - Obsolete Feature in UI

A UI function is obsolete and the product does not warn the user.