CWE-472: Assumed-Immutable Parameter Tampering
The web application does not sufficiently verify inputs that are assumed to be immutable but are actually externally controllable, such as hidden form fields.
Also known as External Control of Assumed-Immutable Web Parameter.
A kind of CWE-642 External Control of Critical State Data.
From the CWE List. © The MITRE Corporation.
Newest
- fortra filecatalyst, filecatalyst workflow +1 moreRemote Code Execution in FileCatalyst Workflow 5.x prior to 5.1.6 Build 1149.8 Critical
- ibm watson cp4d data storesIBM Watson CP4D Data Stores improper input validation5.9 Medium
- jnunemaker httparty, debian linux, fedoraproject fedora +2 morehttparty Multipart/Form-Data Request Tampering Vulnerability5.3 Medium
- moodle, fedoraproject fedora, redhat enterprise linux +2 moreExternal Control of Assumed-Immutable Web Parameter in moodle5.3 Medium
- hcl sametimeHCL Sametime is vulnerable to arbitrary HTTP requests6.8 Medium
- hcl sametimeHCL Sametime is vulnerable to an information disclosure5.3 Medium
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- cisco small business rv series router firmware, rv160 vpn router firmware, rv160w wireless-ac vpn router firmware +3 more +5 moreCisco Small Business RV160, RV160W, RV260, RV260P, and RV260W VPN Routers Remote Code Execution Vulnerabilities9.8 Critical
- otrs, otrs ag ((otrs)) community edition, debian linux +2 more +4 moreSpoofing of From field in several screens3.5 Low
- siemens ag desigo px automation controllers pxc00-e.d, pxc50-e.d, pxc100-e.d, pxc200-e.d with desigo px web modules pxa40-w0, pxa40-w1, pxa40-w2, desigo px automation controllers pxc00-u, pxc64-u, pxc128-u with desigo px web modules pxa30-w0, pxa30-w1, pxa30-w2, desigo px automation controllers pxc22.1-e.d, pxc36-e.d, pxc36.1-e.d with activated web server +16 more +18 moreA vulnerability has been identified in Desigo PX automation controllers PXC00-E.D, PXC50-E.D,...5.3 Medium
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreIn versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, the 'ping' and 'traceroute'...8.8 High
- cambium networks cnpilot, cambiumnetworks cnpilot e400 firmware, cnpilot e410 firmware +3 more +5 moreIn versions 4.3.2-R4 and prior of Cambium Networks cnPilot firmware, although the option to...8.8 High