CWE-236 · Input Validation and Logic
Improper Handling of Undefined Parameters
2CVEs
SortMost likely exploited
2 CVEs with CWE-236 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2022-20828Cisco FirePOWER Software for ASA FirePOWER Module Command Injection VulnerabilityCisco · Cisco FirePOWER Services Software for ASA · CVSS 6.5 · 2022-06-24 | 6.5 | 49% | 2022-06-24 |
| CVE-2026-57032Junos OS: EX Series: Subscribing to an unsupported telemetry sensor path causes fxpc process crashJuniper Networks · Junos OS · CVSS 6.5 · 2026-07-09 | 6.5 | 0.4% | 2026-07-09 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.