CWE-449 - The UI Performs the Wrong Action

Home/CWEs/CWE info/

CWE-449

Abstraction:
Base

Structure:
Simple

Status:
Incomplete

Weakness Name: The UI Performs the Wrong Action

Description: The UI performs the wrong action with respect to the user's request.

Common Consequences: Scope: Other
Impact: Quality Degradation, Varies by Context

Related Weaknesses: CWE-446UI Discrepancy for Security Feature

Release Date:
2006-07-19

Latest Modification Date:
2023-06-29

Latest Security News

Veeam plugs serious holes in Service Provider Console (CVE-2024-42448, CVE-2024-42449)

Cisco Warns of Exploitation of Decade-Old ASA WebVPN Vulnerability

NachoVPN Tool Exploits Flaws in Popular VPN Clients for System Compromise

North Korean Kimsuky Hackers Use Russian Email Addresses for Credential Theft Attacks

Horns&Hooves Campaign Delivers RATs via Fake Emails and JavaScript Payloads

Korea arrests CEO for adding DDoS feature to satellite receivers

Russia sentences Hydra dark web market leader to life in prison

SmokeLoader Malware Resurfaces, Targeting Manufacturing and IT in Taiwan

Top Alert List

MediumDirectory Browsing

MediumAbsence of Anti-CSRF Tokens

LowStrict-Transport-Security Multiple Header Entries (Non-compliant with Spec)

Content Security Policy (CSP) Header Not Set

LowServer Leaks Information via "X-Powered-By" HTTP Response Header Field(s)

InformationalModern Web Application

CSP

InformationalNon-Storable Content

LowCookie without SameSite Attribute

LowCross-Domain JavaScript Source File Inclusion

Top CVE List

CVE-2024-44308 Apple Multiple Products Code Execution Vulnerability

CVE-2017-6736 Cisco IOS and IOS XE Software SNMP Remote Code Execution Vulnerability

CVE-2009-1151 phpMyAdmin Remote Code Execution Vulnerability

CVE-2015-2360 Microsoft Win32k Privilege Escalation Vulnerability

CVE-2017-3881 Cisco IOS and IOS XE Remote Code Execution Vulnerability

CVE-2021-26086 Atlassian Jira Server and Data Center Path Traversal Vulnerability

CVE-2021-26857 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2021-27065 Microsoft Exchange Server Remote Code Execution Vulnerability

CVE-2022-2586 Linux Kernel Use-After-Free Vulnerability

CVE-2023-36884 Microsoft Windows Search Remote Code Execution Vulnerability

Common CWEs

CWE-1110 Incomplete Design Documentation

CWE-441 Unintended Proxy or Intermediary ('Confused Deputy')

CWE-671 Lack of Administrator Control over Security

CWE-1101 Reliance on Runtime Component in Generated Code

CWE-312 Cleartext Storage of Sensitive Information

CWE-1257 Improper Access Control Applied to Mirrored or Aliased Memory Regions

MediumCWE-299 Improper Check for Certificate Revocation

CWE-587 Assignment of a Fixed Address to a Pointer

CWE-593 Authentication Bypass: OpenSSL CTX Object Modified after SSL Objects are Created

CWE-1289 Improper Validation of Unsafe Equivalence in Input

Free security scan for your website

Don't show website scan report rating on the leaderboard

CWE-449 - The UI Performs the Wrong Action

The UI performs the wrong action with respect to the user's request.