CWE-792 · Injection and Smuggling
Incomplete Filtering of One or More Instances of Special Elements
4CVEs
SortMost likely exploited
4 CVEs with CWE-792 as their weakness
| CVE · most likely exploited | CVSS | EPSS | Published |
|---|---|---|---|
| CVE-2023-20057A vulnerability in the URL filtering mechanism of Cisco AsyncOS Software for Cisco Email Security Appliance (ESA) could allow an unauthenticated, remote attacker to bypass the URL…Cisco · Cisco Email Security Appliance (ESA) · CVSS 0 · 2023-01-19 | 0.0 | 0.7% | 2023-01-19 |
| CVE-2023-25608An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiAP-W2 7.2.0 through 7.2.1, 7.0.3 through 7.0.5…Fortinet · FortiAP-W2 · CVSS 5.2 · 2023-09-13 | 5.2 | 0.6% | 2023-09-13 |
| CVE-2025-12758Versions of the package validator before 13.15.22 are vulnerable to Incomplete Filtering of One or More Instances of Special Elements in the isLength() function that does not take…Validator Project · validator · CVSS 7.5 · 2025-11-27 | 7.5 | 0.6% | 2025-11-27 |
| CVE-2022-22297An incomplete filtering of one or more instances of special elements vulnerability [CWE-792] in the command line interpreter of FortiWeb version 6.4.0 through 6.4.1, FortiWeb vers…Fortinet · FortiRecorder · CVSS 5.2 · 2023-03-07 | 5.2 | 0.2% | 2023-03-07 |
EPSS is the probability of exploitation in the next 30 days (FIRST). Data as of 2026-11-14.