137
Relevant to the view "Weaknesses for Simplified Mapping of Published
Vulnerabilities" (CWE-1003)
Nature Type ID Name Page
ParentOf 838 Inappropriate Encoding for Output Context 1764
Applicable Platforms
Language : Not Language-Specific (Prevalence = Often)
Technology : Database Server (Prevalence = Often)
Technology : Web Server (Prevalence = Often)
Alternate Terms
Output Sanitization :
Output Validation :
Output Encoding :
Likelihood Of Exploit
High
Common Consequences
Scope Impact Likelihood
Integrity Modify Application Data
The communications between components can be
modified in unexpected ways. Unexpected commands
can be executed, bypassing other security mechanisms.
Incoming data can be misinterpreted.
Integrity
Confidentiality
Availability
Access Control
Execute Unauthorized Code or Commands
The communications between components can be
modified in unexpected ways. Unexpected commands
can be executed, bypassing other security mechanisms.
Incoming data can be misinterpreted.
Confidentiality Bypass Protection Mechanism
The communications between components can be
modified in unexpected ways. Unexpected commands
can be executed, bypassing other security mechanisms.
Incoming data can be misinterpreted.
Detection Methods
CWE Version 4.14
CWE-116: Improper Encoding or Escaping of Output
CWE-116: Improper Encoding or Escaping of Output