CWEweakness

CWE-794 Incomplete Filtering of Multiple Instances of Special Elements

Official page ↗
Abstraction
Variant
Structure
Simple
Status
Incomplete
Languages
Not Language-Specific
CWE version
5.0

Description

The product receives data from an upstream component, but it does not filter all instances of a special element before sending it to a downstream component.

Extended description

Incomplete filtering of this nature may be applied to: • sequential elements (special elements that appear next to each other) or • non-sequential elements (special elements that appear multiple times in different locations).

Common consequences

• Integrity: Unexpected State

Related

Child of · CWE (1)

  • CWE-792 Incomplete Filtering of One or More Instances of Special Elements weakness

Referenced by CVE · weakness (5)

  • CVE-2026-21876 The OWASP core rule set (CRS) is a set of generic attack detection rules for use with compatible web application firewalls. vulnerability
  • CVE-2021-0233 A vulnerability in Juniper Networks Junos OS ACX500 Series, ACX4000 Series, may allow an attacker to cause a Denial of Service (DoS) by… vulnerability
  • CVE-2021-0203 On Juniper Networks EX and QFX5K Series platforms configured with Redundant Trunk Group (RTG), Storm Control profile applied on the RTG… vulnerability
  • CVE-2020-1665 On Juniper Networks MX Series and EX9200 Series, in a certain condition the IPv6 Distributed Denial of Service (DDoS) protection might not… vulnerability
  • CVE-2019-0002 On EX2300 and EX3400 series, stateless firewall filter configuration that uses the action 'policer' in combination with other actions might… vulnerability