CWE-408: Incorrect Behavior Order: Early Amplification
The product allows an entity to perform a legitimate but expensive operation before authentication or authorization has taken place.
A kind of CWE-696 Incorrect Behavior Order.
From the CWE List. © The MITRE Corporation.
Newest
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +7 more +9 more Sssd: sssd: denial of service via unprivileged autofs cache invalidation 5.5 Medium
- isc bind, bind 9 +1 more Unnecessary validation of DNSSEC signed records 7.5 High
- linux, linux kernel, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 more tcp: call sk_data_ready() after listener migration 7.8 High
- isc bind, bind 9 +1 more Amplification vulnerabilities via self-pointed glue records 5.3 Medium
- openclaw OpenClaw < 2026.3.31 - Resource Consumption via Unauthorized Telegram Audio Preflight Transcription 6.9 Medium
- openclaw OpenClaw < 2026.3.31 - Resource Consumption via Discord Audio Preflight Before Member Authorization 6.9 Medium
- openclaw OpenClaw < 2026.3.31 - Resource Exhaustion via Unauthenticated MS Teams Webhook Body Parsing 8.7 High
- eclipse californium, the eclipse foundation eclipse californium +1 more Eclipse Californium denial of service (DoS) via Datagram Transport Layer Security (DTLS) handshake on parameter mismatch 7.5 High
- juniper junos, juniper networks junos os +1 more Junos OS: SRX Series: An attacker sending spoofed packets to IPSec peers may cause a Denial of Service. 7.5 High