CWE-231 · Input Validation and Logic
Improper Handling of Extra Values
5CVEs
SortMost likely exploited
5 CVEs with CWE-231 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-6841Keycloak: amount of attributes per object is not limited and it may lead to dosRedhat · keycloak · CVSS 7.5 · 2024-09-10 | 7.5 | 0.7% | 2024-09-10 |
| CVE-2023-44386Incorrect request error handling triggers server crash in Vaporvapor · vapor · CVSS 5.3 · 2023-10-05 | 5.3 | 0.7% | 2023-10-05 |
| CVE-2024-20268Cisco Adaptive Security Appliance Software and Firepower Threat Defense Software SNMP Denial of Service VulnerabilityCisco · Cisco Adaptive Security Appliance (ASA) Software · CVSS 7.7 · 2024-10-23 | 7.7 | 0.6% | 2024-10-23 |
| CVE-2024-31397Improper handling of extra values issue exists in Cybozu Garoon 5.0.0 to 5.15.2. If this vulnerability is exploited, a user who can log in to the product with the administrative p…Cybozu, Inc. · Cybozu Garoon · CVSS 4.9 · 2024-06-11 | 4.9 | 0.5% | 2024-06-11 |
| CVE-2026-22888Improper input verification issue exists in Cybozu Garoon 5.0.0 to 6.0.3, which may lead to unauthorized alteration of portal settings, potentially blocking access to the product.Cybozu, Inc. · Cybozu Garoon · CVSS 6.9 · 2026-02-02 | 6.9 | 0.4% | 2026-02-02 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.