Skip to content
OpenAdvisories

Weakness (CWE)

CWE-230: Improper Handling of Missing Values

Variant Draft

The product does not handle or incorrectly handles when a parameter, field, or argument name is specified, but the associated value is missing, i.e. it is empty, blank, or null.

Source: MITRE CWE-230

All Critical High Medium Low Exploited only Public exploit

6 results · Clear filters · Feed

  • Medium 6.6
    CVE-2026-19395

    An empty <img> attribute value in styled text triggers a parser error that halts the device.

    In Qt for MCUs, a Text element that displays styled text halts the device if an <img> tag in the text contains an attribute with an empty value. The text parser passes the empty value to an internal check that only accepts non-empty values. The check fails an…

    qt Qt for MCUs
  • Medium 6.5
    CVE-2026-1461

    Simple Membership <= 4.7.0 - Unauthenticated Improper Handling of Missing Values

    The Simple Membership plugin for WordPress is vulnerable to Improper Handling of Missing Values in all versions up to, and including, 4.7.0 via the Stripe webhook handler. This is due to the plugin only validating webhook signatures when the stripe-webhook-si…

    wpinsider-1 Simple Membership Web / CMS
  • Medium 6.5
    CVE-2025-23225

    IBM MQ denial of service

    IBM MQ 9.3 LTS, 9.3 CD, 9.4 LTS, and 9.4 CD could allow an authenticated user to cause a denial of service due to the improper handling of invalid headers sent to the queue.

    IBM MQ
  • Medium 6.5
    CVE-2024-6237

    389-ds-base: unauthenticated user can trigger a dos by sending a specific extended search request

    A flaw was found in the 389 Directory Server. This flaw allows an unauthenticated user to cause a systematic server crash while sending a specific extended search request, leading to a denial of service.

    Red Hat Red Hat Enterprise Linux 9 Red Hat Enterprise Linux 8 Red Hat Enterprise Linux 7 Linux Debian Ubuntu
  • Medium 6.5
    CVE-2023-1697

    Junos OS: QFX10000 Series, PTX1000 Series: The dcpfe process will crash when a malformed ethernet frame is received

    An Improper Handling of Missing Values vulnerability in the Packet Forwarding Engine (PFE) of Juniper Networks Junos OS allows an adjacent, unauthenticated attacker to cause a dcpfe process core and thereby a Denial of Service (DoS). Continued receipt of thes…

    Juniper Networks Junos OS Network devices
  • Medium 4.3
    CVE-2021-39194

    Denial of service while parsing polymorphic input with tagged polymorphism style in kaml

    kaml is an open source implementation of the YAML format with support for kotlinx.serialization. In affected versions attackers that could provide arbitrary YAML input to an application that uses kaml could cause the application to endlessly loop while parsin…

    charleskorn kaml com.charleskorn.kaml:kaml Maven