CWE-235 · Input Validation and Logic
Improper Handling of Extra Parameters
5CVEs
SortMost likely exploited
5 CVEs with CWE-235 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2017-20160flitto express-param fetchParams.js parameter pollutionflitto · express-param · CVSS 6.3 · 2022-12-31 | 6.3 | 0.9% | 2022-12-31 |
| CVE-2024-47651Parameter Pollution VulnerabilityShilpi Computers · Client Dashboard · CVSS 7.1 · 2024-10-04 | 7.1 | 0.4% | 2024-10-04 |
| CVE-2026-27851When safe filter is used with variable expansion, all following pipelines on the same string are incorrectly interpreted as safe too, enabling unsafe data to be unescaped. This ca…Open-Xchange GmbH · OX Dovecot Pro · CVSS 7.4 · 2026-05-12 | 7.4 | 0.4% | 2026-05-12 |
| CVE-2026-17225Multiple Vulnerabilities in IBM API ConnectIBM · API Connect · CVSS 5.4 · 2026-11-07 | 5.4 | 0.3% | 2026-11-07 |
| CVE-2026-20083A vulnerability in the Secure Copy Protocol (SCP) server feature of Cisco IOS XE Software could allow an authenticated, local attacker with low privileges to cause a denial of ser…Cisco · Cisco IOS XE Software · CVSS 6.5 · 2026-03-25 | 6.5 | 0.1% | 2026-03-25 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.