CWE-117 Improper Output Neutralization for Logs
baseThe product constructs a log message from external input, but it does not neutralize or incorrectly neutralizes special elements when the message is written to a log file.
01
parent weaknesses
Broader classes this is a kind of.
02
vulnerabilities (194)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2011-1930US | critical9.8 | Exploit | ||
In klibc 1.5.20 and 1.5.21, the DHCP options written by ipconfig to /tmp/net-$DEVICE.conf are not properly escaped. This may allow a remote attacker to send a specially crafted DHC… | ||||
| CVE-2000-0574US | medium5.0 | Exploit | ||
FTP servers such as OpenBSD ftpd, NetBSD ftpd, ProFTPd and Opieftpd do not properly cleanse untrusted format strings that are used in the setproctitle function (sometimes called by… | ||||
| CVE-2006-7027US | high10.0 | — | ||
Microsoft Internet Security and Acceleration (ISA) Server 2004 logs unusual ASCII characters in the Host header, including the tab, which allows remote attackers to manipulate port… | ||||
| CVE-2017-10784US | high8.8 | — | ||
The Basic authentication code in WEBrick library in Ruby before 2.2.8, 2.3.x before 2.3.5, and 2.4.x through 2.4.1 allows remote attackers to inject terminal emulator escape sequen… | ||||
| CVE-2004-1302US | high10.0 | — | ||
The id3tag_sort function in id3tag.c for YAMT 0.5 allows remote attackers to execute arbitrary commands via an MP3 file with double quotes in the Artist tag. | ||||
| CVE-2002-1971US | high10.0 | — | ||
The ping utility in networking_utils.php in Sourcecraft Networking_Utils 1.0 allows remote attackers to read arbitrary files via shell metacharacters in the Domain name or IP addre… | ||||
| CVE-2000-1040US | high10.0 | — | ||
Format string vulnerability in logging function of ypbind 3.3, while running in debug mode, leaks file descriptors and allows an attacker to cause a denial of service. | ||||
| CVE-2000-0040US | high10.0 | — | ||
glFtpD allows local users to gain privileges via metacharacters in the SITE ZIPCHK command. | ||||
| CVE-2026-17481US | critical9.8 | — | ||
IBM Documentation Offline 1.0.0 through 1.4.1 could allow a remote attacker to execute arbitrary code due to improper output neutralization for logs. | ||||
| CVE-2025-41429US | critical9.8 | — | ||
a-blog cms multiple versions neutralize logs improperly. If this vulnerability is exploited with CVE-2025-36560, a remote unauthenticated attacker may hijack a legitimate user's se… | ||||
| CVE-2024-0987US | critical9.8 | — | ||
A vulnerability classified as critical has been found in Sichuan Yougou Technology KuERP up to 1.0.4. Affected is an unknown function of the file /runtime/log. The manipulation lea… | ||||
| CVE-2023-46322US | critical9.8 | — | ||
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize ssh hostnames in URLs. The hostname's initial character may be non-alphanumeric. The hostname's other characte… | ||||
| CVE-2023-46321US | critical9.8 | — | ||
iTermSessionLauncher.m in iTerm2 before 3.5.0beta12 does not sanitize paths in x-man-page URLs. They may have shell metacharacters for a /usr/bin/man command line. | ||||
| CVE-2023-39150US | critical9.8 | — | ||
ConEmu before commit 230724 does not sanitize title responses correctly for control characters, potentially leading to arbitrary code execution. This is related to an incomplete fi… | ||||
| CVE-2015-10011US | critical9.8 | — | ||
A vulnerability classified as problematic has been found in OpenDNS OpenResolve. This affects an unknown part of the file resolverapi/endpoints.py. The manipulation leads to improp… | ||||
| CVE-2022-22729US | high8.8 | — | ||
CAMS for HIS Server contained in the following Yokogawa Electric products improperly authenticate the receiving packets. The authentication may be bypassed via some crafted packets… | ||||
| CVE-2020-12409US | high8.8 | — | ||
When using certain blank characters in a URL, they where incorrectly rendered as spaces instead of an encoded URL. This vulnerability affects Firefox < 77. | ||||
| CVE-2018-1000027US | high7.5 | — | ||
The Squid Software Foundation Squid HTTP Caching Proxy version prior to version 4.0.23 contains a NULL Pointer Dereference vulnerability in HTTP Response X-Forwarded-For header pro… | ||||
| CVE-2014-0867US | medium5.8 | Exploit | ||
rcore6/main/addcookie.jsp in RICOS in IBM Algo Credit Limits (aka ACLM) 4.5.0 through 4.7.0 before 4.7.0.03 FP5 in IBM Algorithmics allows remote attackers to create or modify cook… | ||||
| CVE-2023-4571US | high8.6 | — | ||
In Splunk IT Service Intelligence (ITSI) versions below below 4.13.3, 4.15.3, or 4.17.1, a malicious actor can inject American National Standards Institute (ANSI) escape codes into… | ||||
03
attack patterns (3)
CAPEC attack patterns that exploit this.
04
source
Where this definition is published.
MITREUS
scry
Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.
Free scan