CWE-840: Business Logic Errors
Weaknesses in this category identify some of the underlying problems that commonly allow attackers to manipulate the business logic of an application. Errors in business logic can be devastating to an entire application. They can be difficult to find automatically, since they typically involve legitimate use of the application's functionality. However, many business logic errors can exhibit patterns that are similar to well-understood implementation and design weaknesses.
From the CWE List. © The MITRE Corporation.
Newest
- 274056675 springboot-openai-chatgpt274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow5.3 Medium
- 274056675 springboot-openai-chatgpt274056675 springboot-openai-chatgpt addData logic error5.3 Medium
- huawei harmonyosPermission management vulnerability in the lock screen module Impact: Successful exploitation of...6.2 Medium
- huawei emui, harmonyos +1 morePermission bypass vulnerability in the window module Impact: Successful exploitation of this...7.3 High
- zoom workplace, zoom communications, inc workplace apps, zoom meeting software development kit +4 more +6 moreZoom Workplace Apps - Business Logic Error5.3 Medium
- adobe commerce, commerce b2b, magento +2 moreAdobe Commerce | Business Logic Errors (CWE-840)5.3 Medium
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the Account module Impact: Successful exploitation of this...6.6 Medium
- huawei emui, harmonyos +1 moreService logic error vulnerability in the system service module Impact: Successful exploitation of...8.5 High
- psf psf/requests, psf-requests +1 moreUnclaimed S3 Bucket Reference in psf/requests Documentation4.3 Medium
- huawei harmonyosInformation management vulnerability in the Gallery module Impact: Successful exploitation of...7.1 High
- No product listedCoinGate Plugin Payment callback.php postProcess logic error5.3 Medium
- gitlabBusiness Logic Errors in GitLab3.5 Low
- huawei emui, harmonyos +1 moreLaunchAnywhere vulnerability in the account module. Impact: Successful exploitation of this...6.6 Medium
- huawei emui, harmonyos +1 moreAccess control vulnerability in the security verification module. Impact: Successful exploitation...9.3 Critical
- huawei emui, harmonyos +1 morePrivilege escalation vulnerability in the NMS module Impact: Successful exploitation of this...5.5 Medium
- huawei emui, harmonyos +1 moreCracking vulnerability in the OS security module Impact: Successful exploitation of this...6.4 Medium
- huawei emui, harmonyos +1 moreCracking vulnerability in the OS security module Impact: Successful exploitation of this...6.8 Medium
- h2o, h2oai h2o-3, h2oai/h2o-3 +2 moreS3 Bucket Takeover in h2oai/h2o-37.1 High
- keerti1924 online-book-store-website, online bookstore, online bookstore website +2 morekeerti1924 Online-Book-Store-Website shop.php logic error4.3 Medium
- sourcecodester online mobile management store, oretnom23 online mobile store management system +1 moreSourceCodester Online Mobile Management Store Product Price logic error4.3 Medium
- microweber, microweber microweber/microweber +1 moreBusiness Logic Errors in microweber/microweber6.0 Medium
- microweber, microweber microweber/microweber +1 moreBusiness Logic Errors in microweber/microweber5.9 Medium
- huawei ajmd-370s, ajmd-370s firmware +1 moreThe Bluetooth module of some Huawei Smart Screen products has an identity authentication bypass...8.8 High
- h2o, h2oai h2oai/h2o-3 +1 moreH2O S3 Bucket Takeover8.7 High
- froxlor, froxlor froxlor/froxlor +1 moreBusiness Logic Errors in froxlor/froxlor3.8 Low
- adobe commerce, magento, magento commerce +2 moreBypass Purchase Order Approval using Company User in Adobe Commerce B2B4.3 Medium
- fossbilling, fossbilling fossbilling/fossbilling +1 moreBusiness Logic Errors in fossbilling/fossbilling5.4 Medium
- fossbilling, fossbilling fossbilling/fossbilling +1 moreBusiness Logic Errors in fossbilling/fossbilling5.4 Medium
- phpmyfaq, thorsten thorsten/phpmyfaq +1 moreBusiness Logic Errors in thorsten/phpmyfaq8.3 High
- answer, answerdev answerdev/answer +1 moreBusiness Logic Errors in answerdev/answer8.1 High
- answer, answerdev answerdev/answer +1 moreBusiness Logic Errors in answerdev/answer6.0 Medium
- froxlor, froxlor froxlor/froxlor +1 moreBusiness Logic Errors in froxlor/froxlor5.5 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreBusiness Logic Errors in ikus060/rdiffweb5.7 Medium
- ikus-soft rdiffweb, ikus060 ikus060/rdiffweb +1 moreBusiness Logic Errors in ikus060/rdiffweb2.8 Low
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 does FTP transfers secured by krb5, it handles message verification failures...5.9 Medium
- haxx curl, apple macos, debian linux +15 more +17 moreWhen curl < 7.84.0 saves cookies, alt-svc and hsts data to local files, it makes the operation...9.8 Critical
- erudika erudika/para, para +1 moreBusiness Logic Errors in erudika/para9.0 Critical
- haxx curl, debian linux, siemens simatic s7-1500 cpu 1518-4 pn/dp mfp +3 more +5 morelibcurl would reuse a previously created connection even when a TLS or SSHrelated option had been...7.5 High
- livehelperchat livehelperchat/livehelperchat, live helper chat +1 moreHost Header injection in password Reset in livehelperchat/livehelperchat8.8 High
- snipe snipe/snipe-it, snipeitapp snipe-it +1 moreOld sessions are not blocked by the login enable function. in snipe/snipe-it7.4 High
- crater-invoice crater-invoice/crater, craterapp crater +1 moreBusiness Logic Errors in crater-invoice/crater6.5 Medium
- dolibarr dolibarr/dolibarr, erp\/crm +1 moreBusiness Logic Errors in dolibarr/dolibarr4.3 Medium
- microweber, microweber microweber/microweber +1 moreBusiness Logic Errors in microweber/microweber9.4 Critical
- microweber, microweber microweber/microweber +1 moreUse multiple time the one-time coupon in microweber/microweber5.3 Medium
- publify publify/publify, publify project publify +1 moreBusiness Logic Errors in publify/publify6.5 Medium
- pimcore, pimcore pimcore/pimcore +1 moreBusiness Logic Errors in pimcore/pimcore4.3 Medium
- janeczku calibre-web, janeczku/calibre-web +1 moreBusiness Logic Errors in janeczku/calibre-web7.7 High
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreBusiness Logic Errors in yetiforcecompany/yetiforcecrm7.7 High
- yetiforcecompany yetiforcecompany/yetiforcecrm, yetiforce customer relationship management +1 moreBusiness Logic Errors in yetiforcecompany/yetiforcecrm7.3 High
- adobe commerce, magento commerce, magento open source +2 moreMagento Commerce Gift Card Business Logic Error6.5 Medium
- Show moreLoading…