CWE-707: Improper Neutralization
The product does not ensure or incorrectly ensures that structured messages or data are well-formed and that certain security properties are met before being used when received from an upstream component, or before being sent to a downstream component.
From the CWE List. © The MITRE Corporation.
Newest
- splunk soar Improper Neutralization in Splunk SOAR 8.8 High
- splunk enterprise Security Hardening in Splunk Enterprise - October 2026 9.9 Critical
- splunk, splunk enterprise +1 more Improper Neutralization in Splunk Enterprise 9.8 Critical
- cisco application policy infrastructure controller (apic) Cisco Application Policy Infrastructure Controller Hardening Release: October 2026 - Improper Neutralization Vulnerabilities 9.8 Critical
- cisco nx-os software, nx-os system software in aci mode, unified computing system (managed) +2 more Cisco NX-OS Software Security Hardening Release: October 2026 - Improper Neutralization Vulnerabilities 8.8 High
- halo-dev halo halo-dev Halo SpEL ReplyNotificationSubscriptionHelper.java neutralization 6.9 Medium
- cisco secure firewall adaptive security appliance (asa) software, secure firewall management center (fmc), secure firewall threat defense (ftd) software +2 more Cisco Secure Adaptive Security Appliance Software, Secure Firewall Threat Defense Software and Secure Firewall Management Center Software Hardening Release - Improper Neutralization Vulnerabilities 9.9 Critical
- a2ui-project a2ui a2ui-project a2ui Angular Renderer server-to-client.ts z.any injection 5.1 Medium
- cisco secure email, secure email and web manager +1 more Cisco Secure Email Gateway Security Hardening Release 9.8 Critical
- cisco ios xr software Cisco IOS XR Software Security Hardening Release: September 2026 8.8 High
- greydgl pentestgpt GreyDGL PentestGPT Web-Page Crawling injection 2.3 Low
- gl-inet gl-mt3000 GL-iNet GL-MT3000 plugins.so Native Plugin glc plugins.set_config injection 9.3 Critical
- wso2 api control plane, api manager, traffic manager +1 more +3 more Denial of Service via Malicious JSON Payloads in Throttling Events in Multiple WSO2 Products Causing Persistent Service Disruption 8.6 High
- erzhongxmu jeewms erzhongxmu JeeWMS JimuReport test-connection Endpoint testConnection injection 6.9 Medium
- ahujasid blender-mcp ahujasid blender-mcp server.py open injection 5.3 Medium
- nousresearch hermes-agent NousResearch hermes-agent memory_tool.py _scan_memory_content injection 5.3 Medium
- nousresearch hermes-agent NousResearch hermes-agent config.py _sanitize_env_lines injection 6.3 Medium
- nousresearch hermes-agent NousResearch hermes-agent run_agent.py _compress_context injection 6.9 Medium
- nousresearch hermes-agent NousResearch hermes-agent skills_tool.py skill_view injection 6.9 Medium
- astrbotdevs astrbot AstrBotDevs AstrBot skill_manager.py _sanitize_prompt_description injection 5.3 Medium
- No product listed KLiK SocialMediaWebsite HTTP POST Request Parameter injection 6.9 Medium
- No product listed KLiK SocialMediaWebsite HTTP GET Request Parameter injection 5.3 Medium
- nousresearch hermes-agent NousResearch hermes-agent prompt_builder.py _scan_context_content injection 6.9 Medium
- nousresearch hermes-agent NousResearch hermes-agent Skills Guard Multi-Word Prompt skills_guard.py injection 6.9 Medium
- baomidou dynamic-datasource baomidou dynamic-datasource StandardEvaluationContext/SpelExpressionParser DsSpelExpressionProcessor.java DsSpelExpressionProcessor#doDetermineDatasource injection 5.3 Medium
- No product listed Envoy Query Parameter header_mutation.cc params.add injection 5.3 Medium
- langflow-ai langflow langflow-ai langflow Model Context Protocol Configuration API mcp_projects.py install_mcp_config injection 5.3 Medium
- campcodes complete pos management and inventory system Campcodes Complete POS Management and Inventory System Environment Variable SettingsController.php injection 5.3 Medium
- promtengineer localgpt PromtEngineer localGPT LLM Prompt server.py _route_using_overviews injection 6.9 Medium
- deepwisdom metagpt Foundation Agents MetaGPT DataInterpreter write_analysis_code.py injection 5.3 Medium
- vanna-ai vanna vanna-ai vanna legacy exec injection 5.3 Medium
- bagofwords1 bagofwords bagofwords1 bagofwords code_execution.py generate_df injection 5.3 Medium
- codegenieapp serverless-express CodeGenieApp serverless-express Users Endpoint dynamodb.ts injection 5.3 Medium
- opencc jflow opencc JFlow WF_CCForm.java Calculate injection 5.3 Medium
- dromara ujcms Dromara UJCMS ImportDataController import-channel importChanel injection 5.3 Medium
- aizuda snail-job aizuda snail-job QLExpressEngine.java QLExpressEngine.doEval injection 5.3 Medium
- kiteworks security-advisories, nextcloud group folders +1 more Nextcloud Groupfolders users with read-only permissions for team folder can restore deleted files from trash bin 3.5 Low
- dromara datacompare Dromara dataCompare JDBC URL DbconfigServiceImpl.java DbConfig injection 5.3 Medium
- No product listed Improper neutralization for some Intel(R) Neural Compressor software before version v3.4 within... 2.4 Low
- No product listed Kilo Code Prompt ClineProvider.ts ClineProvider injection 5.3 Medium
- mrvautin expresscart mrvautin expressCart Edit Product edit injection 4.8 Medium
- No product listed Improper neutralization for some Edge Orchestrator software before version 24.11.1 for Intel(R)... 6.9 Medium
- sarrionandia tournatrack sarrionandia tournatrack Jinja2 Template check_id.py injection 4.8 Medium
- thautwarm vscode-diana thautwarm vscode-diana Jinja2 Template Gen.py injection 4.8 Medium
- microsoft windows, windows 10 version 1507, windows 10 version 1607 +33 more +35 more Microsoft Management Console Security Feature Bypass Vulnerability 7.0 High
- shopxo ShopXO Template ThemeAdminService.php injection 5.1 Medium
- telstra smart modem gen 2 Telstra Smart Modem Gen 2 HTTP Header injection 6.9 Medium
- d-link dns-320, dns-320lw, dns-325 +5 more +7 more D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection 9.2 Critical
- d-link dns-320, dns-320lw, dns-325 +5 more +7 more D-Link DNS-320/DNS-320LW/DNS-325/DNS-340L account_mgr.cgi cgi_user_add os command injection 9.2 Critical
- 1000 projects bookstore management system, bookstore management system project management system +1 more 1000 Projects Bookstore Management System book_detail.php sql injection 6.9 Medium
- Show olderLoading…