CWE-841: Improper Enforcement of Behavioral Workflow
The product supports a session in which more than one behavior must be performed by an actor, but it does not properly ensure that the actor performs the behaviors in the required sequence or timeframe.
A kind of CWE-691 Insufficient Control Flow Management.
From the CWE List. © The MITRE Corporation.
Newest
- botan project botan, red hat enterprise linux 10 +1 moreBotan has a TLS 1.3 certificate authentication bypass8.7 High
- senior-walter web-based pharmacy product management systemA Business Logic vulnerability exists in SourceCodester Pharmacy Product Management System 1.0 in...7.5 High
- ibm aspera consoleIBM Aspera Console Denial of Service2.7 Low
- rustdesk, rustdesk-client rustdesk client +1 moreRustDesk Client Can Orphan API Channel to Ignore All Admin Commands and ACL Policies4.8 Medium
- devolutions serverImproper Enforcement of Behavioral Controls in Devolutions Server 2025.3.15 and earlier allows an...9.8 Critical
- chamilo chamilo-lms, lms +1 moreChamilo: Friend Request Workflow Bypass - Unauthorized Friend Addition and ID Validation Bypass7.1 High
- gunet open eclass platform, openeclass +1 moreOpen eClass Business Logic Flaw Allows Students to Mark Attendance in Expired Activities4.3 Medium
- openvpnInteractive service agent in OpenVPN version 2.5.0 through 2.7_rc2 on Windows allows a local...1.3 Low
- seneka software hardware information technology trade contracting and industry ltd. co. onaylarımBusiness Logic Error in Seneka Software's Onaylarım4.3 Medium
- bdtask isshue, isshue multi store ecommerce shopping cart solution +1 moreBdtask/CodeCanyon Isshue Multi Store eCommerce Shopping Cart Solution submit_checkout behavioral workflow5.3 Medium
- kiteworks security-advisoriesNextcloud Tables app allowed to include local file via PhpSpreadsheet when importing a table6.5 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows BitLocker Security Feature Bypass Vulnerability6.1 Medium
- microsoft windows 11 version 24h2, windows 11 version 25h2, windows server 2025 +3 more +5 moreWindows BitLocker Security Feature Bypass Vulnerability6.1 Medium
- microsoft windows 10 version 1809, windows 10 version 21h2, windows 10 version 22h2 +19 more +21 moreWindows BitLocker Security Feature Bypass Vulnerability6.1 Medium
- microsoft windows 11 version 22h2, windows 11 version 22h3, windows 11 version 23h2 +10 more +12 moreWindows BitLocker Security Feature Bypass Vulnerability6.1 Medium
- akinsoft myrezztaBusiness Logic Error in Akinsoft's MyRezzta6.3 Medium
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 morenet-imap vulnerable to STARTTLS stripping via invalid response timing7.6 High
- freescoutFreeScout Has Business Logic Errors5.3 Medium
- freescoutFreeScout Has Business Logic Errors6.1 Medium
- freescoutFreeScout Has Business Logic Errors7.0 High
- freescoutFreeScout Has Business Logic Errors8.5 High
- freescoutFreeScout Has Business Logic Errors7.0 High
- freescoutFreeScout Has Business Logic Errors7.1 High
- freescoutFreeScout Has Business Logic Errors7.1 High
- dnnsoftware dnn.platform, dotnetnuke +1 moreDnn.Platform's Site Import could use an external source with a crafted request3.5 Low
- opentext content managementA user enumeration and subsequent data integrity vulnerability affecting barcode functionality5.9 Medium
- 274056675 springboot-openai-chatgpt274056675 springboot-openai-chatgpt Number of Question questionCou updateQuestionCou behavioral workflow5.3 Medium
- lizardbyte sunshineSunshine improperly enforces pairing protocol request order7.7 High
- nanjing xingyuantu technology sparkshopA loop hole in the payment logic of Sparkshop v1.16 allows attackers to arbitrarily modify the...7.5 High
- apple macosThis issue was addressed by adding an additional prompt for user consent. This issue is fixed in...5.5 Medium
- aimeos ai-controller-frontend, frontend controller +1 moreaimeos/ai-controller-frontend doesn't reset payment status in basket5.3 Medium
- spa-cart, spa-cart spa-cartcms +1 morespa-cartcms Checkout Page checkout behavioral workflow6.9 Medium
- aimeos ai-client-htmlAimeos HTML client vulnerable to digital products download without proper payment status check5.3 Medium
- gitlabImproper Enforcement of Behavioral Workflow in GitLab7.7 High
- apple ios and ipados, ipad os, iphone os +2 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 17.1 and iPadOS 17.1...3.3 Low
- apple ipados, macos, ios and ipados +1 more +3 moreA logic issue was addressed with improved checks. This issue is fixed in iOS 16.2 and iPadOS 16.2...5.5 Medium
- dece software geodiFunction Bypass in Geodi7.1 High
- mayurik free hospital management system for small practicesSourceCodester Free Hospital Management System for Small Practices Redirect behavioral workflow5.4 Medium
- amazon fire tv stick 3rd gen, insignia tv with fireos, amazon fire os +2 moreAn Improper Enforcement of Behavioral Workflow vulnerability in the exchangeDeviceServices...5.4 Medium
- keycloakKeycloak: Impersonation and lockout possible through incorrect handling of email trust6.5 Medium
- secheron sepcos control and protection relay firmware package, sepcos control and protection relay firmware +1 moreSecheron SEPCOS Control and Protection Relay9.4 Critical
- secheron sepcos control and protection relay firmware package, sepcos control and protection relay firmware +1 moreSecheron SEPCOS Control and Protection Relay9.4 Critical
- secheron sepcos control and protection relay firmware package, sepcos control and protection relay firmware +1 moreSecheron SEPCOS Control and Protection Relay7.5 High
- publify publify/publify, publify project publify +1 moreBusiness Logic Errors in publify/publify6.5 Medium