CWE-236 Improper Handling of Undefined Parameters

variant

The product does not handle or incorrectly handles when a particular parameter, field, or argument name is not defined or supported by the product.

01

parent weaknesses

Broader classes this is a kind of.

02

vulnerabilities (2)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2022-20828UShigh7.2Exploit
A vulnerability in the CLI parser of Cisco FirePOWER Software for Adaptive Security Appliance (ASA) FirePOWER module could allow an authenticated, remote attacker to execute arbitr…
CVE-2026-57032US——
An Improper Handling of Undefined Parameters vulnerability in the packet forwarding engine (pfe) of Juniper Networks Junos OS on EX Series devices allows an authenticated attacker…
03

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan