CWE-687 Function Call With Incorrectly Specified Argument Value

variant

The product calls a function, procedure, or routine, but the caller specifies an argument that contains the wrong value, which may lead to resultant weaknesses.

01

parent weaknesses

Broader classes this is a kind of.

02

child weaknesses

More specific entries beneath this one.

03

vulnerabilities (4)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2024-36985UShigh8.8Exploit
In Splunk Enterprise versions below 9.2.2, 9.1.5, and 9.0.10, a low-privileged user that does not hold the admin or power Splunk roles could cause a Remote Code Execution through a…
CVE-2024-32862UShigh8.1—
Under certain circumstances the ExacqVision Web Services does not provide sufficient protection from untrusted domains.
CVE-2024-49603USmedium6.5—
Dell PowerScale OneFS Versions 8.2.2.x through 9.9.0.x contain an incorrect specified argument vulnerability. A remote low privileged legitimate user could potentially exploit this…
CVE-2025-22620US—Exploit
gitoxide is an implementation of git written in Rust. Prior to 0.17.0, gix-worktree-state specifies 0777 permissions when checking out executable files, intending that the umask wi…
04

source

Where this definition is published.

scry

Weaknesses like this turn up in real, exploitable exposures. See what is exposed on your perimeter with a free passive scan.

Free scan