CWE-437 · Input Validation and Logic
Incomplete Model of Endpoint Features
4CVEs
SortMost likely exploited
4 CVEs with CWE-437 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2024-55629Suricata generic detection bypass using TCP urgent supportOISF · suricata · CVSS 7.5 · 2025-01-06 | 7.5 | 0.5% | 2025-01-06 |
| CVE-2024-57176An issue in the shiroFilter function of White-Jotter project v0.2.2 allows attackers to execute a directory traversal and access sensitive endpoints via a crafted URL.Antabot · White-Jotter · CVSS 7.6 · 2025-02-21 | 7.6 | 0.5% | 2025-02-21 |
| CVE-2016-8365OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Software Development Kit (S…OSIsoft · PI System software · 2018-04-03 | – | 0.3% | 2018-04-03 |
| CVE-2023-20084A vulnerability in the endpoint software of Cisco Secure Endpoint for Windows could allow an authenticated, local attacker to evade endpoint protection within a limited time windo…Cisco · Cisco Secure Endpoint · CVSS 5 · 2023-11-22 | 5.0 | 0.2% | 2023-11-22 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.