Home/CWEs/CWE info/

CWE-448 - Obsolete Feature in UI

Abstraction:
Base

Structure:
Simple

Status:
Draft

Weakness Name: Obsolete Feature in UI

Description: A UI function is obsolete and the product does not warn the user.

Common Consequences: Scope: Other
Impact: Quality Degradation, Varies by Context

Related Weaknesses: CWE-446UI Discrepancy for Security Feature

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Top Security News

Microsoft confirms it's killing off Skype in May, after 14 years

Data Leak Exposes TopSec's Role in China's Censorship-as-a-Service Operations

U.S. recovers $31 million stolen in 2021 Uranium Finance hack

EncryptHub breaches 618 orgs to deploy infostealers, ransomware

MITRE Caldera RCE vulnerability with public PoC fixed, patch ASAP! (CVE-2025–27364)

Mozilla Updates Firefox Terms Again After Backlash Over Broad Data License Language

Siemens Teamcenter vulnerability could allow account takeover (CVE-2025-23363)

Vo1d Botnet's Peak Surpasses 1.59M Infected Android TVs, Spanning 226 Countries

Common Alerts

LowCSP: X-Content-Security-Policy

HighSQL Injection - Hypersonic SQL

InformationalASP.NET ViewState Disclosure

LowHTTPS Content Available via HTTP

MediumCSP: style-src unsafe-inline

InformationalUser Controllable JavaScript Event (XSS)

HighOpen Redirect

LowInsufficient Site Isolation Against Spectre Vulnerability

MediumCSP: script-src unsafe-inline

MediumHTTP to HTTPS Insecure Transition in Form Post

Top CVE List

CVE-2024-49035 Microsoft Partner Center Improper Access Control Vulnerability

CVE-2023-34192 Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting (XSS) Vulnerability

CVE-2024-20953 Oracle Agile Product Lifecycle Management (PLM) Deserialization Vulnerability

CVE-2025-24989 Microsoft Power Pages Improper Access Control Vulnerability

CVE-2017-0148 Microsoft SMBv1 Server Remote Code Execution Vulnerability

CVE-2025-0108 Palo Alto Networks PAN-OS Authentication Bypass Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2020-29574 CyberoamOS (CROS) SQL Injection Vulnerability

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

Common CWEs

CWE-1099 Inconsistent Naming Conventions for Identifiers

MediumCWE-602 Client-Side Enforcement of Server-Side Security

CWE-625 Permissive Regular Expression

MediumCWE-301 Reflection Attack in an Authentication Protocol

CWE-1115 Source Code Element without Standard Prologue

MediumCWE-364 Signal Handler Race Condition

CWE-622 Improper Validation of Function Hook Arguments

CWE-313 Cleartext Storage in a File or on Disk

CWE-346 Origin Validation Error

CWE-48 Path Equivalence: 'file name' (Internal Whitespace)

Free online web security scanner

Don't show website scan report rating on the leaderboard

CWE-448 - Obsolete Feature in UI

A UI function is obsolete and the product does not warn the user.